T
he plugin does not filter the "delete_entries" parameter from user requests, leading to an SQL Injection vulnerability.
References
| Link | Resource |
|---|---|
| https://wpscan.com/vulnerability/9d49df6b-e2f1-4662-90d2-84c29c3b1cb0/ | Exploit Third Party Advisory |
| https://wpscan.com/vulnerability/9d49df6b-e2f1-4662-90d2-84c29c3b1cb0/ | Exploit Third Party Advisory |
Configurations
History
21 Nov 2024, 07:20
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://wpscan.com/vulnerability/9d49df6b-e2f1-4662-90d2-84c29c3b1cb0/ - Exploit, Third Party Advisory |
Information
Published : 2024-01-16 16:15
Updated : 2025-06-20 17:15
NVD link : CVE-2022-3764
Mitre link : CVE-2022-3764
CVE.ORG link : CVE-2022-3764
JSON object : View
Products Affected
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')