CVE-2021-24848

CVE-2021-24848 is a high-severity SQL injection vulnerability affecting the Mediamatic WordPress plugin versions prior to 2.8.1. An authenticated attacker can exploit this flaw remotely without user interaction by manipulating the categoryID parameter in the mediamaticAjaxRenameCategory AJAX action. Successful exploitation could lead to full compromise of confidentiality, integrity, and availability of the affected system. While no public exploit code or active exploitation has been observed, and community discussion is minimal, the vulnerability presents a significant risk due to its ease of exploitation and critical impact.