Lucene search
PRIOn knowledge basePRION:CVE-2022-3254HistoryOct 31, 2022 - 4:15 p.m.
Sql injection
2022-10-3116:15:00
PRIOn knowledge base
www.prio-n.com
2
wordpress classifieds plugin
sql injection
ajax action
unauthenticated users
premium module
0.002 Low
EPSS
Percentile
57.7%
The WordPress Classifieds Plugin WordPress plugin before 4.3 does not properly sanitise and escape some parameters before using them in a SQL statement via an AJAX action available to unauthenticated users and when a specific premium module is active, leading to a SQL injection
| CPE | Name | Operator | Version |
|---|---|---|---|
| another_wordpress_classifieds_plugin | lt | 4.3 |
Related
cvelist
cvelist
CVE-2022-3254 AWP Classifieds Plugin < 4.3 - Unauthenticated SQLi
2022-10-31 00:00:00
nvd
nvd
CVE-2022-3254
2022-10-31 16:15:11
patchstack
patchstack
wpvulndb
wpvulndb
AWP Classifieds Plugin < 4.3 - Unauthenticated SQLi
2022-10-10 00:00:00
wpexploit
wpexploit
AWP Classifieds Plugin < 4.3 - Unauthenticated SQLi
2022-10-10 00:00:00
cve
cve
CVE-2022-3254
2022-10-31 16:15:11