CVE-2021-4450

The Post Grid plugin for WordPress through version 2.1.12 contains a blind SQL injection vulnerability in its handling of post metadata. Authenticated users with contributor access or higher can exploit this flaw by injecting malicious SQL code into unescaped parameters, allowing them to modify database queries and retrieve sensitive information. The vulnerability stems from improper input escaping and inadequate SQL query preparation. Version 2.1.13 and later address this issue.

Based on public CVE data (MITRE/NVD).