Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
NA

CVE-2022-3254

Published: 31/10/2022 Updated: 01/11/2022
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 0
Subscribe to Awpcp

Vulnerability Summary

The WordPress Classifieds Plugin WordPress plugin prior to 4.3 does not properly sanitise and escape some parameters before using them in a SQL statement via an AJAX action available to unauthenticated users and when a specific premium module is active, leading to a SQL injection

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

awpcp another wordpress classifieds plugin

References

CWE-89https://wpscan.com/vulnerability/546c47c2-5b4b-46db-b754-c6b43aef2660https://nvd.nist.gov
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4040privilege escalationCVE-2024-4112CVE-2024-32872man-in-the-middleCVE-2024-32788bypassCVE-2024-3400CVE-2024-28976
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook