Lucene search
HistoryNov 28, 2022 - 2:15 p.m.
CVE-2022-3769
owm weather
wordpress
sql injection
vulnerability
contributor role
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
45.2%
The OWM Weather WordPress plugin before 5.6.9 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as contributor
Affected configurations
Node
ujsoftwareowm_weatherRange<5.6.9wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ujsoftware | owm_weather | * | cpe:2.3:a:ujsoftware:owm_weather:*:*:*:*:*:wordpress:*:* |
Related
prion
prion
Sql injection
2022-11-28 14:15:00
patchstack
patchstack
cnvd
cnvd
WordPress OWM Weather plugin SQL injection vulnerability
2022-11-30 00:00:00
cvelist
cvelist
CVE-2022-3769 OWM Weather < 5.6.9 - Contributor+ SQLi
2022-11-28 13:47:08
wpvulndb
wpvulndb
OWM Weather < 5.6.9 - Contributor+ SQLi
2022-11-02 00:00:00
cve
cve
CVE-2022-3769
2022-11-28 14:15:14
wpexploit
wpexploit
OWM Weather < 5.6.9 - Contributor+ SQLi
2022-11-02 00:00:00
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
45.2%
Related for NVD:CVE-2022-3769