CVE-2022-0786

creationtimestamp| type| source ---|---|--- 2025-01-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-26 2025-02-09 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-02-09 2025-03-15 00:00:00+00:00| seen| The Shadowserver...

VulnCheck KEV: CVE-2022-0786

The KiviCare WordPress plugin before 2.3.9 does not sanitise and escape some parameters before using them in SQL statements via the ajaxpost AJAX action with the getdoctordetails route, leading to SQL Injections exploitable by unauthenticated users...

CVE-2022-0786

CVE-2022-0786 : WordPress KiviCare plugin vulnerable to unauthenticated SQL injection in versions before 2.3.9 via the ajax_post route get_doctor_details. The issue arises from improper sanitization/escaping of parameters used in SQL statements, allowing attackers to access or modify data and pot...