CVE-2021-25109
Low
Description
The Futurio Extra WordPress plugin before 1.6.3 is affected by a SQL Injection vulnerability that could be used by high privilege users to extract data from the database as well as used to perform Cross-Site Scripting (XSS) against logged in admins by making send open a malicious link.
SeverityLow
CVSS2.7
Exploit probability—
ProductFuturiowp Futurio Extra
PublishedFeb 14, 2022
First seenFeb 14, 2022
Weakness typeCWE-89SQL injection
How to fix
Update
- futuriowp futurio_extra1.6.3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| futuriowp futurio_extra | v < 1.6.3 | 1.6.3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.