CVE

CVE-2021-24731

9.8

CVSS

Description

The Registration Forms – User profile, Content Restriction, Spam Protection, Payment Gateways, Invitation Codes WordPress plugin before 3.7.1.6 does not properly escape user data before using it in a SQL statement in the wp-json/pie/v1/login REST API endpoint, leading to an SQL injection.

Attack Vector

Privileges Req.

User Interaction

registration forms – user profile, content restriction, spam protection, payment gateways, invitation codes

Updated Sep 18, 2026View on NVD →

S4E scanner

criticalProduct Based Web Vulnerabilities~10 seconds

CVE-2021-24731 Scanner

CVE-2021-24731 scanner - SQL Injection (SQLi) vulnerability in Pie Register plugin for WordPress

Used 2.3k times · 5.9k assets checked · domain, ipv4, subdomain

Scanner page →Run scanner

CVE history: registration forms – user profile, content restriction, spam protection, payment gateways, invitation codes

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →