CVE-2021-25054: Wow-Company Wpcalc

High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days.

The WPcalc WordPress plugin through 2.1 does not sanitize user input into the 'did' parameter and uses it in a SQL statement, leading to an authenticated SQL Injection vulnerability.

Affected products

• Wow-Company Wpcalc: up to and including 2.1

Published 2022-01-10. Last modified 2026-06-17.