CVE-2021-24321

The Bello - Directory & Listing WordPress theme before 1.6.0 did not sanitise the bt_bb_listing_field_price_range_to, bt_bb_listing_field_now_open, bt_bb_listing_field_my_lng, listing_list_view and bt_bb_listing_field_my_lat parameters before using them in a SQL statement, leading to SQL Injection issues

• CWE-89

• https://m0ze.ru/vulnerability/%5B2021-03-21%5D-%5BWordPress%5D-%5BCWE-89%5D-Bello-WordPress-Theme-v1.5.9.txtExploit, Third Party Advisory
• https://wpscan.com/vulnerability/7314f9fa-c047-4e0c-b145-940240a50c02Exploit, Third Party Advisory
• https://m0ze.ru/vulnerability/%5B2021-03-21%5D-%5BWordPress%5D-%5BCWE-89%5D-Bello-WordPress-Theme-v1.5.9.txtExploit, Third Party Advisory
• https://wpscan.com/vulnerability/7314f9fa-c047-4e0c-b145-940240a50c02Exploit, Third Party Advisory

Published

Jun 1, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-24316The search feature of the Mediumish WordPress theme through …6.1
• CVE-2021-24317The Listeo WordPress theme before 1.6.11 did not properly sa…6.1
• CVE-2021-24318The Listeo WordPress theme before 1.6.11 did not ensure that…6.5
• CVE-2021-24319The Bello - Directory & Listing WordPress theme before 1.6.0…5.4
• CVE-2021-2432Vulnerability in the Java SE product of Oracle Java SE (comp…3.7
• CVE-2021-24320The Bello - Directory & Listing WordPress theme before 1.6.0…6.1
• CVE-2021-24322The Database Backup for WordPress plugin before 2.4 did not …5.4
• CVE-2021-24323When taxes are enabled, the "Additional tax classes" field w…4.8
• CVE-2021-24324The 404 SEO Redirection WordPress plugin through 1.3 is lack…6.5
• CVE-2021-24325The tab parameter of the settings page of the 404 SEO Redire…6.1
• CVE-2021-24326The tab parameter of the settings page of the All 404 Redire…5.4
• CVE-2021-24327The SEO Redirection Plugin – 301 Redirect Manager WordPress …4.8