CVE-2022-4268 Plugin Logic < 1.0.8 - Admin+ SQLi

The Plugin Logic WordPress plugin before 1.0.8 does not sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin...

CVE-2022-4268

The CVE-2022-4268 entry concerns the WordPress Plugin Logic plugin (versions prior to 1.0.8) that is vulnerable to SQL injection. The root cause is improper sanitisation/escaping of a parameter before its use in an SQL statement, enabling exploitation by high-privilege users such as admins. Affec...

CVE-2022-4268 Plugin Logic < 1.0.8 - Admin+ SQLi

The Plugin Logic WordPress plugin before 1.0.8 does not sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin...