High severity7.2NVD Advisory· Published Nov 8, 2021· Updated Jun 17, 2026
CVE-2021-24628
CVE-2021-24628
Description
The Wow Forms WordPress plugin through 3.1.3 does not sanitise or escape a 'did' GET parameter before using it in a SQL statement, when deleting a form in the admin dashboard, leading to an authenticated SQL injection
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- WordPress/Wow Formsdescription
Patches
Vulnerability mechanics
References
2- codevigilant.com/disclosure/2021/wp-plugin-mwp-forms/nvdExploitThird Party Advisory
- wpscan.com/vulnerability/d742ab35-4e2d-42a8-bebc-b953b2e10e3cnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.