← WordPress Vulnerabilities
WordPress security by component

WP Cloudy, weather plugin

WP Cloudy, weather plugin is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Feb 28, 2022; the highest CVE/CNA score is 8.8.

Plugin slug: wp-cloudy

CVE-2021-24864: WP Cloudy, weather plugin: SQL injection

WP Cloudy, weather plugin is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.

PublishedFeb 28, 2022
Safe version guidanceSee mitigation notes
Safe version
Feb 28, 2022 CVE-2021-24864
WP Cloudy, weather plugin: SQL injection
WP Cloudy, weather plugin is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
See mitigation notes
CVE8.8
NVD8.8