https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-13T01:15:10.901163+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-24402 CVE-2021-24402 — WP iCommerce <= 1.1.1 - Authenticated (contributor+) SQL Injection 2026-10-13T01:15:10.902193+00:00

Affected: Unknown WP iCommerce – the first interactive ecommerce for wordpress

The Orders functionality in the WP iCommerce WordPress plugin through 1.1.1 has an `order_id` parameter which is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection. The feature is available to low privilege users such as contributors