PT-2022-13365

Name of the Vulnerable Software and Affected Versions Master Elements WordPress plugin versions prior to 8.0 Description The issue concerns the Master Elements WordPress plugin, which does not properly validate and escape the meta ids parameter of its remove post meta condition AJAX action. This...

CVE-2022-0693: Improper Neutralization of Special Elements used in an SQL Command

The Master Elements WordPress plugin through 8.0 does not validate and escape the metaids parameter of its removepostmetacondition AJAX action available to both unauthenticated and authenticated users before using it in a SQL statement, leading to an unauthenticated SQL Injection...