CVE-2021-24580: Wow-Estore Side Menu

High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days.

The Side Menu Lite WordPress plugin before 2.2.6 does not sanitise user input from the List page in the admin dashboard before using it in SQL statement, leading to a SQL Injection issue

Affected products

• Wow-Estore Side Menu: before 2.2.6 (fixed in 2.2.6)

Published 2021-08-30. Last modified 2026-06-17.