CVE
CVE-2021-24731
9.8
CVSS
Description
The Registration Forms – User profile, Content Restriction, Spam Protection, Payment Gateways, Invitation Codes WordPress plugin before 3.7.1.6 does not properly escape user data before using it in a SQL statement in the wp-json/pie/v1/login REST API endpoint, leading to an SQL injection.
Attack Vector
-
Privileges Req.
-
User Interaction
-
registration forms – user profile, content restriction, spam protection, payment gateways, invitation codes
Updated Oct 24, 2026View on NVD →
This CVE is in S4E's catalog, but no public scanner is mapped to it yet.
CVE history: registration forms – user profile, content restriction, spam protection, payment gateways, invitation codes
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →