PT-2022-13452

Name of the Vulnerable Software and Affected Versions Bestbooks WordPress plugin versions 2.6.3 and earlier Description The issue is related to SQL Injection, where some parameters are not properly sanitised and escaped before being used in a SQL statement via an AJAX action. This can be exploite...

CVE-2022-0827: Improper Neutralization of Special Elements used in an SQL Command

The Bestbooks WordPress plugin through 2.6.3 does not sanitise and escape some parameters before using them in a SQL statement via an AJAX action, leading to an SQL Injection exploitable by unauthenticated users...