CVE-2021-24392

7.2 highEPSS 1.5%

High (7.2) in swiftcrm club-management-software. EPSS 1.5% chance of exploitation in the next 30 days.

An id GET parameter of the WordPress Membership SwiftCloud.io WordPress plugin through 1.0 is not properly sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection.

Severity

CVSS 3.1

7.2 high

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.5% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2021-09-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

swiftcrm:club-management-software

References

https://codevigilant.com/disclosure/2021/wp-plugin-club-management-software/
https://wpscan.com/vulnerability/68530e63-bba3-4a9a-ae83-516684aa5dc6
https://codevigilant.com/disclosure/2021/wp-plugin-club-management-software/
https://wpscan.com/vulnerability/68530e63-bba3-4a9a-ae83-516684aa5dc6

Check your stack JSON