Lucene search

K
cvelistWPScanCVELIST:CVE-2022-2593
HistoryAug 22, 2022 - 3:04 p.m.

CVE-2022-2593 Better Search and Replace < 1.4.1 - Admin+ SQLi

2022-08-2215:04:52
CWE-89
WPScan
www.cve.org
1
cve-2022-2593; better search replace; sql injection; wordpress; plugin; admin+

0.001 Low

EPSS

Percentile

32.2%

The Better Search Replace WordPress plugin before 1.4.1 does not properly sanitise and escape table data before inserting it into a SQL query, which could allow high privilege users to perform SQL Injection attacks

CNA Affected

[
  {
    "product": "Better Search Replace",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "1.4.1",
        "status": "affected",
        "version": "1.4.1",
        "versionType": "custom"
      }
    ]
  }
]

0.001 Low

EPSS

Percentile

32.2%