plugin

Wp Cloudy Vulnerabilities

1 known security issue reported for the Wp Cloudy WordPress plugin. Most recent disclosed Oct 13, 2021.

1 high

Running Wp Cloudy on your site? Check whether your installed version is affected.

WP Cloudy <= 4.4.9 - Authenticated (Admin+) SQL Injection

high

The WP Cloudy, weather plugin WordPress plugin before 4.4.9 does not escape the post_id parameter before using it in a SQL statement in the admin dashboard, leading to a SQL Injection issue

CVSS:: 8.8
Affected:: up to 4.4.9
Fix:: No patched version reported
Disclosed:: Oct 13, 2021

CVE-2021-24864 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database