CVE-2021-24314: Boostifythemes Goto

Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days.

The Goto WordPress theme before 2.1 did not sanitise, validate of escape the keywords GET parameter from its listing page before using it in a SQL statement, leading to an Unauthenticated SQL injection issue

Affected products

• Boostifythemes Goto: before 2.1 (fixed in 2.1)

Published 2021-05-17. Last modified 2026-06-17.