CVE-2021-24337

The id GET parameter of one of the Video Embed WordPress plugin through 1.0's page (available via forced browsing) is not sanitised, validated or escaped before being used in a SQL statement, allowing low privilege users, such as subscribers, to perform SQL injection.

• CWE-89

• https://codevigilant.com/disclosure/2021/wp-plugin-video-embed-box/Exploit, Third Party Advisory
• https://wpscan.com/vulnerability/a8fd8dd4-5b5e-462e-8dae-065d5e2d003aExploit, Third Party Advisory
• https://codevigilant.com/disclosure/2021/wp-plugin-video-embed-box/Exploit, Third Party Advisory
• https://wpscan.com/vulnerability/a8fd8dd4-5b5e-462e-8dae-065d5e2d003aExploit, Third Party Advisory

Published

Jun 7, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-24331The Smooth Scroll Page Up/Down Buttons WordPress plugin befo…4.8
• CVE-2021-24332The Autoptimize WordPress plugin before 2.8.4 was missing pr…4.8
• CVE-2021-24333The Content Copy Protection & Prevent Image Save WordPress p…6.5
• CVE-2021-24334The Instant Images – One Click Unsplash Uploads WordPress pl…5.4
• CVE-2021-24335The Car Repair Services & Auto Mechanic WordPress theme befo…6.1
• CVE-2021-24336The FlightLog WordPress plugin through 3.0.2 does not saniti…7.2
• CVE-2021-24338The Pods – Custom Content Types and Fields WordPress plugin …5.4
• CVE-2021-24339The Pods – Custom Content Types and Fields WordPress plugin …5.4
• CVE-2021-2434Vulnerability in the Oracle Web Applications Desktop Integra…8.1
• CVE-2021-24340The WP Statistics WordPress plugin before 13.0.8 relied on u…7.5
• CVE-2021-24341When deleting a date in the Xllentech English Islamic Calend…8.8
• CVE-2021-24342The JNews WordPress theme before 8.0.6 did not sanitise the …6.1