CVE-2022-1690

The Note Press WordPress plugin through 0.1.10 does not sanitise and escape the ids from the bulk actions before using them in a SQL statement in an admin page, leading to an SQL injection...

CVE-2022-1690

creationtimestamp| type| source ---|---|--- 2022-06-08 14:42:35+00:00| seen| https://t.me/cibsecurity/43987...

CVE-2022-1690

The CVE-2022-1690 issue affects the WordPress plugin Note Press (versions up to 0.1.10). The underlying vulnerability is an SQL injection in admin bulk actions caused by failing to sanitize/escape IDs before embedding them in a SQL statement. Impact described across multiple sources indicates an ...

CVE-2022-1690 Note Press <= 0.1.10 - Admin+ SQLi via Bulk Actions

The Note Press WordPress plugin through 0.1.10 does not sanitise and escape the ids from the bulk actions before using them in a SQL statement in an admin page, leading to an SQL injection...