漏洞描述
WordPress是WordPress基金会的一套使用PHP语言开发的博客平台。WordPress Perfect Surveyplugin在1.5.2之前版本存在SQL注入漏洞，该漏洞源于基于数据库的应用缺少对外部输入SQL语句的验证。攻击者可利用该漏洞执行非法SQL命令。
WordPress插件Perfect Survey低于1.5.2版本存在SQL注入漏洞(CVE-2021-24762)
PoC代码
暂无相关漏洞推荐
- TVT 数码科技 NVMS-1000 / 文件读取漏洞
- Flowise /api/v1/node-load-method/customMCP 命令执行漏洞（CVE-2025-8943）
- N-central /dms/services/ServerMMS XML 外部实体注入漏洞（CVE-2025-11700）
- POC CVE-2017-14725: WordPress < 4.8.2 - Authenticated Open Redirect
- POC CVE-2017-17092: WordPress < 4.9.1 - Authenticated JavaScript File Upload
- POC CVE-2018-13317: TOTOLINK A3002RU 1.0.8 - Information Disclosure
- POC CVE-2019-19822: TOTOLINK/Realtek Routers - Information Disclosure
- POC CVE-2019-19823: TOTOLINK/Realtek Routers - Information Disclosure
- POC CVE-2019-19825: TOTOLINK/Realtek Routers - CAPTCHA Bypass
- POC CVE-2021-34427: Eclipse BIRT Viewer - Remote Code Execution
- POC CVE-2022-29081: Zoho ManageEngine - Access Control Bypass
- POC CVE-2021-4449: ZoomSounds Plugin - Unauthenticated Arbitrary File Upload
- POC CVE-2025-11700: N-central - XML External Entities Injection