CVE-2022-0787 Limit Login Attempts (Spam Protection) < 5.1 - Unauthenticated SQLi

2022-03-2817:23:23

CWE-89

WPScan

www.cve.org

0.04 Low

EPSS

Percentile

92.2%

JSON

The Limit Login Attempts (Spam Protection) WordPress plugin before 5.1 does not sanitise and escape some parameters before using them in SQL statements via AJAX actions (available to unauthenticated users), leading to SQL Injections

CNA Affected

[
  {
    "product": "Limit Login Attempts (Spam Protection)",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "5.1",
        "status": "affected",
        "version": "5.1",
        "versionType": "custom"
      }
    ]
  }
]

References

wpscan.com/vulnerability/69329a8a-2cbe-4f99-a367-b152bd85b3dd

0.04 Low

EPSS

Percentile

92.2%

JSON

Related for CVELIST:CVE-2022-0787