Lucene search
HistoryAug 22, 2022 - 3:15 p.m.
CVE-2022-2593
wordpress
sql injection
better search replace
7.2 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
32.2%
The Better Search Replace WordPress plugin before 1.4.1 does not properly sanitise and escape table data before inserting it into a SQL query, which could allow high privilege users to perform SQL Injection attacks
Affected configurations
Node
deliciousbrainsbetter_search_replaceRange<1.4.1wordpress
Related
prion
prion
Sql injection
2022-08-22 15:15:00
cvelist
cvelist
CVE-2022-2593 Better Search and Replace < 1.4.1 - Admin+ SQLi
2022-08-22 15:04:52
wpexploit
wpexploit
Better Search and Replace < 1.4.1 - Admin+ SQLi
2022-08-01 00:00:00
wpvulndb
wpvulndb
Better Search and Replace < 1.4.1 - Admin+ SQLi
2022-08-01 00:00:00
cve
cve
CVE-2022-2593
2022-08-22 15:15:15
openvas
openvas
WordPress Better Search Replace Plugin < 1.4.1 SQLi Vulnerability
2023-07-31 00:00:00
patchstack
patchstack
7.2 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
32.2%
Related for NVD:CVE-2022-2593