CVE-2021-24392: Swiftcrm Club-Management-Software

High severity, CVSS 7.2. EPSS: 1.5% chance of exploitation in the next 30 days.

An id GET parameter of the WordPress Membership SwiftCloud.io WordPress plugin through 1.0 is not properly sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection.

Affected products

• Swiftcrm Club-Management-Software: up to and including 1.0

Published 2021-09-06. Last modified 2026-06-17.