Lucene search
HistoryDec 26, 2022 - 1:15 p.m.
CVE-2022-4268
plugin logic
wordpress
sql injection
high privilege users
admin
CVSS3
7.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
43.3%
The Plugin Logic WordPress plugin before 1.0.8 does not sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin
Affected configurations
Node
plugin_logic_projectplugin_logicRange≤1.0.7wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| plugin_logic_project | plugin_logic | * | cpe:2.3:a:plugin_logic_project:plugin_logic:*:*:*:*:*:wordpress:*:* |
Related
wpvulndb
wpvulndb
Plugin Logic < 1.0.8 - Admin+ SQLi
2022-12-02 00:00:00
cvelist
cvelist
CVE-2022-4268 Plugin Logic < 1.0.8 - Admin+ SQLi
2022-12-26 12:27:56
wpexploit
wpexploit
Plugin Logic < 1.0.8 - Admin+ SQLi
2022-12-02 00:00:00
cve
cve
CVE-2022-4268
2022-12-26 13:15:14
prion
prion
Sql injection
2022-12-26 13:15:00
CVSS3
7.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
43.3%
Related for NVD:CVE-2022-4268