Approved changes feed: RSS · Atom

cpe:2.3:a:wow-estore:side_menu:*:*:*:*:lite:wordpress:*:*

part: a version: * update: *

VendorWow Estore (4cd2be38-6f7f-574e-88b5-68ae99ef6cf8)
ProductSide Menu (8bf52815-dd2c-5388-af81-af5be7a27171)
Edition*
Language*
Software editionlite
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-24580 vulnerable 2026-06-08 05:30:38.805683 Side Menu Lite < 2.2.6 - Authenticated SQL Injection
The Side Menu Lite WordPress plugin before 2.2.6 does not sanitise user input from the List page in the admin dashboard before using it in SQL statement, leading to a SQL Injection issue
Published: 2021-08-30T14:11:22.000Z
Updated: 2024-08-03T19:35:20.253Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-24521 vulnerable 2026-06-08 05:30:04.517112 Side Menu Lite < 2.2.1 - Authenticated SQL Injection
The Side Menu Lite – add sticky fixed buttons WordPress plugin before 2.2.1 does not properly sanitize input values from the browser when building an SQL statement. Users with the administrator role or permission to manage this plugin could perform an SQL Injection attack.
Published: 2021-08-09T10:04:14.000Z
Updated: 2024-08-03T19:35:19.972Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.