CVE-2022-3150

The WP Custom Cursors WordPress plugin before 3.2 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privileged users such as admin...

CVE-2022-3150

creationtimestamp| type| source ---|---|--- 2022-10-17 16:13:08+00:00| seen| https://t.me/cibsecurity/51564 2025-05-14 16:33:41+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16323...

CVE-2022-3150

The CVE is for the WordPress plugin WP Custom Cursors, fixed in version 3.2. The vulnerability is an SQL injection caused by improper sanitization/escaping of a parameter before it is used in a SQL statement, allowing exploitation by high-privilege users (e.g., admins). Affected software: WP Cust...

CVE-2022-3150 WP Custom Cursors < 3.2 - Admin+ SQLi

The WP Custom Cursors WordPress plugin before 3.2 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privileged users such as admin...