Lucene search
CydavePATCHSTACK:8EA403BF391AB38C1A24FF06F96968B2HistoryMay 02, 2022 - 12:00 a.m.
WordPress WP Contacts Manager plugin <= 2.2.4 - Unauthenticated SQL Injection (SQLi) vulnerability
2022-05-0200:00:00
cydave
patchstack.com
11
0.002 Low
EPSS
Percentile
54.5%
Unauthenticated SQL Injection (SQLi) vulnerability discovered by cydave in WordPress WP Contacts Manager plugin (versions <= 2.2.4).
Solution
Deactivate and delete. This plugin has been closed as of April 20, 2022 and is not available for download. This closure is temporary, pending a full review.
| CPE | Name | Operator | Version |
|---|---|---|---|
| wp contacts manager | le | 2.2.4 |
Related
prion
prion
Sql injection
2022-05-23 08:16:00
nvd
nvd
CVE-2022-1014
2022-05-23 08:16:06
wpvulndb
wpvulndb
WP Contacts Manager <= 2.2.4 - Unauthenticated SQLi
2022-05-02 00:00:00
cve
cve
CVE-2022-1014
2022-05-23 08:16:06
wpexploit
wpexploit
WP Contacts Manager <= 2.2.4 - Unauthenticated SQLi
2022-05-02 00:00:00
cvelist
cvelist
CVE-2022-1014 WP Contacts Manager <= 2.2.4 - Unauthenticated SQLi
2022-05-23 07:15:23