CVE-2021-44779

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Unauthenticated SQL Injection (SQLi) vulnerability discovered in [GWA] AutoResponder WordPress plugin (versions <= 2.3), vulnerable at (&listid). No patched version available, plugin closed.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
G.J.P.	[GWA] AutoResponder (WordPress plugin)	>= <= 2.3, <= 2.3

References

https://patchstack.com/database/vulnerability/gwa-autoresponder/wordpress-gwa-autoresponder-plugin-2-3-unauthenticated-sql-injection-sqli-vulnerabilityThird Party Advisory
https://wordpress.org/plugins/gwa-autoresponder/Product, Third Party Advisory
https://patchstack.com/database/vulnerability/gwa-autoresponder/wordpress-gwa-autoresponder-plugin-2-3-unauthenticated-sql-injection-sqli-vulnerabilityThird Party Advisory
https://wordpress.org/plugins/gwa-autoresponder/Product, Third Party Advisory

Timeline

Published: Feb 4, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-44788.2Dräger CC-Vision Basic before 7.5.3 and Dräger CC-Vision E-Cal before 7.2.5.0 contain an out-of-bounds write vulnerability when loading .gdt CVE-2021-44794.0Dräger Atlan A350 versions 1.00 up to and including 1.01 contains an improper input handling vulnerability that allows attackers to cause a CVE-2021-447909.8A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Ap CVE-2021-447916.1In Apache Druid 0.22.1 and earlier, certain specially-crafted links result in unescaped URL parameters being sent back in HTML responses. Th CVE-2021-447925.3Single Connect does not perform an authorization check when using the "log-monitor" module. A remote attacker could exploit this vulnerabili CVE-2021-447938.6Single Connect does not perform an authorization check when using the sc-reports-ui" module. A remote attacker could exploit this vulnerabil CVE-2021-447945.3Single Connect does not perform an authorization check when using the "sc-diagnostic-ui" module. A remote attacker could exploit this vulner CVE-2021-447955.3Single Connect does not perform an authorization check when using the "sc-assigned-credential-ui" module. A remote attacker could exploit th CVE-2021-44808.2Dräger Protector Software prior to version 6.4.2 contains a local privilege escalation vulnerability due to insecure file system permissions CVE-2021-44818.2Dräger Protector Software prior to version 6.4.2 contains a local privilege escalation vulnerability due to insecure file system permissions CVE-2021-448278.8There is remote authenticated OS command injection on TP-Link Archer C20i 0.9.1 3.2 v003a.0 Build 170221 Rel.55462n devices vie the X_TP_Ext CVE-2021-448287.8Arm Mali GPU Kernel Driver (Midgard r26p0 through r30p0, Bifrost r0p0 through r34p0, and Valhall r19p0 through r34p0) allows a non-privilege