9.8
CVSSv3

CVE-2022-3915

CVSSv4: NA | CVSSv3: 9.8 | CVSSv2: NA | VMScore: 1000 | EPSS: 0.00459 | KEV: Not Included
Published: 12/12/2022 Updated: 21/11/2024

Vulnerability Summary

The Dokan WordPress plugin prior to 3.7.6 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

wedevs dokan