High severity7.2NVD Advisory· Published Nov 8, 2021· Updated Jun 17, 2026

CVE-2021-24844

Description

The Affiliates Manager WordPress plugin before 2.8.7 does not validate the orderby parameter before using it in an SQL statement in the admin dashboard, leading to an SQL Injection issue

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Affiliates Managerdescription
WordPress/Affiliates Managerllm-fuzzy
Range: <2.8.7
Package: https://wordpress.org/plugins/affiliates-manager

Patches

Vulnerability mechanics

References

plugins.trac.wordpress.org/changeset/2611862/nvdPatchThird Party Advisory
wpscan.com/vulnerability/ebd6d13c-572e-4861-b7d1-a7a87332ce0dnvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.468
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000