Lucene search
PRIOn knowledge basePRION:CVE-2022-0693HistoryApr 25, 2022 - 4:16 p.m.
Sql injection
2022-04-2516:16:00
PRIOn knowledge base
www.prio-n.com
5
0.024 Low
EPSS
Percentile
89.9%
The Master Elements WordPress plugin through 8.0 does not validate and escape the meta_ids parameter of its remove_post_meta_condition AJAX action (available to both unauthenticated and authenticated users) before using it in a SQL statement, leading to an unauthenticated SQL Injection
| CPE | Name | Operator | Version |
|---|---|---|---|
| master_elements | le | 8.0 |
Related
cve
cve
CVE-2022-0693
2022-04-25 16:16:07
wpvulndb
wpvulndb
Master Elements <= 8.0 - Unauthenticated SQLi
2022-03-29 00:00:00
cnvd
cnvd
WordPress plugin Master Elements SQL injection vulnerability
2022-04-27 00:00:00
nuclei
nuclei
WordPress Master Elements <=8.0 - SQL Injection
2023-03-05 13:42:10
patchstack
patchstack
wpexploit
wpexploit
Master Elements <= 8.0 - Unauthenticated SQLi
2022-03-29 00:00:00
cvelist
cvelist
CVE-2022-0693 Master Elements <= 8.0 - Unauthenticated SQLi
2022-04-25 15:51:06
nvd
nvd
CVE-2022-0693
2022-04-25 16:16:07