Lucene search
WPScanCVELIST:CVE-2022-4373HistoryJan 02, 2023 - 9:49 p.m.
CVE-2022-4373 Quote-O-Matic <= 1.0.5 - Admin+ SQLi
2023-01-0221:49:29
WPScan
www.cve.org
1
cve-2022-4373
quote-o-matic
sql injection
wordpress
admin
privilege escalation
EPSS
0.001
Percentile
38.1%
The Quote-O-Matic WordPress plugin through 1.0.5 does not properly sanitize and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin.
CNA Affected
[
{
"vendor": "Unknown",
"product": "Quote-O-Matic",
"versions": [
{
"status": "affected",
"versionType": "custom",
"version": "0",
"lessThanOrEqual": "1.0.5"
}
],
"defaultStatus": "affected",
"collectionURL": "https://wordpress.org/plugins"
}
]Related
cve
cve
CVE-2022-4373
2023-01-02 22:15:17
nvd
nvd
CVE-2022-4373
2023-01-02 22:15:17
wpexploit
wpexploit
Quote-O-Matic <= 1.0.5 - Admin+ SQLi
2022-12-12 00:00:00
wpvulndb
wpvulndb
Quote-O-Matic <= 1.0.5 - Admin+ SQLi
2022-12-12 00:00:00
prion
prion
Sql injection
2023-01-02 22:15:00