High severity7.2NVD Advisory· Published Nov 8, 2021· Updated Jun 17, 2026
CVE-2021-24791
CVE-2021-24791
Description
The Header Footer Code Manager WordPress plugin before 1.1.14 does not validate and escape the "orderby" and "order" request parameters before using them in a SQL statement when viewing the Snippets admin dashboard, leading to SQL injections
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- WordPress/Header Footer Code Manager WordPress plugindescription
- Range: <1.1.14
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/d55caa9b-d50f-4c13-bc69-dc475641735fnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.