CVE-2022-3915

The Dokan WordPress plugin before 3.7.6 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users...

CVE-2022-3915

The Dokan WordPress plugin before 3.7.6 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users...

CVE-2022-3915

CVE-2022-3915 affects the Dokan WordPress plugin prior to 3.7.6. The issue is an unauthenticated SQL injection caused by improper sanitisation/escaping of a parameter before it is used in a SQL statement. Impact is high (C/H, I/H, A/H) with network attack vector and no user interaction required. ...