CVE-2021-24497: Satollo Giveaway

High severity, CVSS 7.2. EPSS: 1.3% chance of exploitation in the next 30 days.

The Giveaway WordPress plugin through 1.2.2 is vulnerable to an SQL Injection issue which allows an administrative user to execute arbitrary SQL commands via the $post_id on the options.php page.

Affected products

• Satollo Giveaway: up to and including 1.2.2

Published 2021-08-23. Last modified 2026-06-17.