CVE-2022-1472 Better Find and Replace < 1.3.6 - Admin+ SQLi

2022-06-2010:25:49

CWE-89

WPScan

www.cve.org

0.001 Low

EPSS

Percentile

37.9%

JSON

The Better Find and Replace WordPress plugin before 1.3.6 does not properly sanitise, validate and escape various parameters before using them in an SQL statement, leading to an SQL Injection

CNA Affected

[
  {
    "product": "Better Find and Replace",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "1.3.6",
        "status": "affected",
        "version": "1.3.6",
        "versionType": "custom"
      }
    ]
  }
]

References

wpscan.com/vulnerability/9c608b14-dc5e-469e-b97a-84696fae804c

0.001 Low

EPSS

Percentile

37.9%

JSON

Related for CVELIST:CVE-2022-1472