Lucene search
PRIOn knowledge basePRION:CVE-2022-0434HistoryMar 07, 2022 - 9:15 a.m.
Sql injection
2022-03-0709:15:00
PRIOn knowledge base
www.prio-n.com
5
0.04 Low
EPSS
Percentile
92.2%
The Page View Count WordPress plugin before 2.4.15 does not sanitise and escape the post_ids parameter before using it in a SQL statement via a REST endpoint, available to both unauthenticated and authenticated users. As a result, unauthenticated attackers could perform SQL injection attacks
| CPE | Name | Operator | Version |
|---|---|---|---|
| page_view_count | lt | 2.4.15 |
Related
wpexploit
wpexploit
Page Views Count < 2.4.15 - Unauthenticated SQL Injection
2022-02-01 00:00:00
nuclei
nuclei
WordPress Page Views Count <2.4.15 - SQL Injection
2022-09-29 11:51:03
nvd
nvd
CVE-2022-0434
2022-03-07 09:15:09
patchstack
patchstack
cvelist
cvelist
CVE-2022-0434 Page Views Count < 2.4.15 - Unauthenticated SQL Injection
2022-03-07 08:16:39
cve
cve
CVE-2022-0434
2022-03-07 09:15:09
wpvulndb
wpvulndb
Page Views Count < 2.4.15 - Unauthenticated SQL Injection
2022-02-01 00:00:00