Lucene search
PRIOn knowledge basePRION:CVE-2022-1683HistoryJun 08, 2022 - 10:15 a.m.
Sql injection
2022-06-0810:15:00
PRIOn knowledge base
www.prio-n.com
3
0.001 Low
EPSS
Percentile
45.2%
The amtyThumb WordPress plugin through 4.2.0 does not sanitise and escape a parameter before using it in a SQL statement via its shortcode, leading to an SQL injection and is exploitable by any authenticated user (and not just Author+ like the original advisory mention) due to the fact that they can execute shortcodes via an AJAX action
Related
patchstack
patchstack
wpvulndb
wpvulndb
amtyThumb <= 4.2.0 - Subscriber+ SQLi
2022-05-09 00:00:00
cve
cve
CVE-2022-1683
2022-06-08 10:15:10
cvelist
cvelist
CVE-2022-1683 amtyThumb <= 4.2.0 - Subscriber+ SQLi
2022-06-06 08:51:16
cnvd
cnvd
WordPress amtyThumb plugin SQL注入漏洞
2022-06-13 00:00:00
wpexploit
wpexploit
amtyThumb <= 4.2.0 - Subscriber+ SQLi
2022-05-09 00:00:00
nvd
nvd
CVE-2022-1683
2022-06-08 10:15:10