https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T12:22:35.406253+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-24461 CVE-2021-24461 — FAQ Builder < 1.3.6 - Authenticated Blind SQL Injections 2026-10-06T12:22:35.421416+00:00

Affected: Ays Pro FAQ Builder AYS

The get_faqs() function in the FAQ Builder AYS WordPress plugin before 1.3.6 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard