CVE-2022-4356

creationtimestamp| type| source ---|---|--- 2023-01-03 00:30:01+00:00| seen| https://t.me/cibsecurity/55783...

CVE-2022-4356 LetsRecover < 1.2.0 - Admin+ SQLi

The LetsRecover WordPress plugin before 1.2.0 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin...

CVE-2022-4356 LetsRecover < 1.2.0 - Admin+ SQLi

The LetsRecover WordPress plugin before 1.2.0 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin...

CVE-2022-4356

The CVE-2022-4356 affects the LetsRecover WordPress plugin prior to version 1.2.0. The vulnerability is a SQL injection caused by improper sanitization/escaping of a parameter used in SQL statements, exploitable by high-privilege users such as admins. Public references describe an admin+ SQLi sce...