CVE-2022-3769

The CVE-2022-3769 entry concerns the WordPress OWM Weather plugin, versions prior to 5.6.9. The vulnerability is a SQL injection caused by improper sanitisation/escaping of a parameter before its use in a SQL statement, allowing exploitation by a user with as little as the Contributor role. The C...

CVE-2022-3769 OWM Weather < 5.6.9 - Contributor+ SQLi

The OWM Weather WordPress plugin before 5.6.9 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as contributor...