Lucene search
PRIOn knowledge basePRION:CVE-2022-0784HistoryMar 28, 2022 - 6:15 p.m.
Sql injection
2022-03-2818:15:00
PRIOn knowledge base
www.prio-n.com
7
0.04 Low
EPSS
Percentile
92.2%
The Title Experiments Free WordPress plugin before 9.0.1 does not sanitise and escape the id parameter before using it in a SQL statement via the wpex_titles AJAX action (available to unauthenticated users), leading to an unauthenticated SQL injection
| CPE | Name | Operator | Version |
|---|---|---|---|
| title_experiments_free | lt | 9.0.1 |
Related
cve
cve
CVE-2022-0784
2022-03-28 18:15:09
nvd
nvd
CVE-2022-0784
2022-03-28 18:15:09
wpexploit
wpexploit
Title Experiments Free < 9.0.1 - Unauthenticated SQLi
2022-03-07 00:00:00
patchstack
patchstack
nuclei
nuclei
WordPress Title Experiments Free <9.0.1 - SQL Injection
2023-01-01 12:46:16
wpvulndb
wpvulndb
Title Experiments Free < 9.0.1 - Unauthenticated SQLi
2022-03-07 00:00:00
cvelist
cvelist
CVE-2022-0784 Title Experiments Free < 9.0.1 - Unauthenticated SQLi
2022-03-28 17:23:21