Search vulnerabilities

Results 1

CVE-2022-2460

WPDating < 7.4.0 - Multiple Unauthenticated SQLi

The WPDating WordPress plugin before 7.4.0 does not properly escape user input before concatenating it to certain SQL queries, leading to multiple SQL injection vulnerabilities exploitable by unauthenticated users

CVSS 3.1 · 4.3 Medium EPSS 1.1% KEV · Not listed
Products