Lucene search
WPScanCVELIST:CVE-2022-3254HistoryOct 31, 2022 - 12:00 a.m.
CVE-2022-3254 AWP Classifieds Plugin < 4.3 - Unauthenticated SQLi
2022-10-3100:00:00
CWE-89
WPScan
www.cve.org
cve-2022-3254
awp classifieds plugin
wordpress
sql injection
unauthenticated users
ajax action
premium module
0.002 Low
EPSS
Percentile
57.7%
The WordPress Classifieds Plugin WordPress plugin before 4.3 does not properly sanitise and escape some parameters before using them in a SQL statement via an AJAX action available to unauthenticated users and when a specific premium module is active, leading to a SQL injection
CNA Affected
[
{
"vendor": "Unknown",
"product": "WordPress Classifieds Plugin – Ad Directory & Listings by AWP Classifieds",
"versions": [
{
"version": "4.3",
"status": "affected",
"lessThan": "4.3",
"versionType": "custom"
}
]
}
]Related
patchstack
patchstack
wpvulndb
wpvulndb
AWP Classifieds Plugin < 4.3 - Unauthenticated SQLi
2022-10-10 00:00:00
prion
prion
Sql injection
2022-10-31 16:15:00
nvd
nvd
CVE-2022-3254
2022-10-31 16:15:11
wpexploit
wpexploit
AWP Classifieds Plugin < 4.3 - Unauthenticated SQLi
2022-10-10 00:00:00
cve
cve
CVE-2022-3254
2022-10-31 16:15:11