CVE-2021-24151

CVE-2021-24151 describes an authenticated blind SQL injection vulnerability in the WP Editor WordPress plugin prior to version 1.2.7. This flaw allows an attacker with administrator privileges to inject malicious SQL queries through unsanitized setting fields, potentially leading to full compromise of the database. With a CVSS score of 7.2 (HIGH), this vulnerability has a low attack complexity and high impact on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.