Critical severity9.8NVD Advisory· Published May 17, 2021· Updated Jun 17, 2026
CVE-2021-24314
CVE-2021-24314
Description
The Goto WordPress theme before 2.1 did not sanitise, validate of escape the keywords GET parameter from its listing page before using it in a SQL statement, leading to an Unauthenticated SQL injection issue
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:boostifythemes:goto:*:*:*:*:*:wordpress:*:*+ 1 more
- cpe:2.3:a:boostifythemes:goto:*:*:*:*:*:wordpress:*:*range: <2.1
- (no CPE)range: 2.1
Patches
Vulnerability mechanics
References
2- m0ze.ru/vulnerability/%5B2021-03-24%5D-%5BWordPress%5D-%5BCWE-89%5D-Goto-WordPress-Theme-v2.0.txtnvdExploitThird Party Advisory
- wpscan.com/vulnerability/1cc6dc17-b019-49dd-8149-c8bba165eb30nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.