VYPR

Astra Pro Addon

by WordPress

CVEs (1)

  • CVE-2021-24507CriAug 9, 2021
    risk 0.65cvss 9.8epss 0.11

    The Astra Pro Addon WordPress plugin before 3.5.2 did not properly sanitise or escape some of the POST parameters from the astra_pagination_infinite and astra_shop_pagination_infinite AJAX action (available to both unauthenticated and authenticated user) before using them in SQL…