Lucene search
PRIOn knowledge basePRION:CVE-2022-3848HistoryNov 28, 2022 - 2:15 p.m.
Sql injection
2022-11-2814:15:00
PRIOn knowledge base
www.prio-n.com
2
wp user merger
sql injection
wordpress plugin
improper sanitization
parameter escape
exploitation
low-level roles
0.001 Low
EPSS
Percentile
45.3%
The WP User Merger WordPress plugin before 1.5.3 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as admin
| CPE | Name | Operator | Version |
|---|---|---|---|
| wp_user_merger | lt | 1.5.3 |
Related
cve
cve
CVE-2022-3848
2022-11-28 14:15:17
cvelist
cvelist
CVE-2022-3848 WP User Merger < 1.5.3 - Admin+ SQLi via wpsu_user_id
2022-11-28 13:47:19
patchstack
patchstack
nvd
nvd
CVE-2022-3848
2022-11-28 14:15:17