CVEs-PoC/2021/CVE-2021-24731.md

### [CVE-2021-24731](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-24731)
![](https://img.shields.io/static/v1?label=Product&message=Registration%20Forms%20%E2%80%93%20User%20profile%2C%20Content%20Restriction%2C%20Spam%20Protection%2C%20Payment%20Gateways%2C%20Invitation%20Codes&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=3.7.1.6%3C%203.7.1.6%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-89%20SQL%20Injection&color=brighgreen)

### Description

The Registration Forms – User profile, Content Restriction, Spam Protection, Payment Gateways, Invitation Codes WordPress plugin before 3.7.1.6 does not properly escape user data before using it in a SQL statement in the wp-json/pie/v1/login REST API endpoint, leading to an SQL injection.

### POC

#### Reference
- https://wpscan.com/vulnerability/6bed00e4-b363-43b8-a392-d068d342151a

#### Github
No PoCs found on GitHub currently.