VulnCheck KEV: CVE-2022-0846

The SpeakOut! Email Petitions WordPress plugin before 2.14.15.1 does not sanitise and escape the id parameter before using it in a SQL statement via the dkspeakoutsendmail AJAX action, leading to an SQL Injection exploitable by unauthenticated users...

PT-2022-13469

Name of the Vulnerable Software and Affected Versions SpeakOut! Email Petitions WordPress plugin versions prior to 2.14.15.1 Description The issue is related to SQL Injection, where the id parameter is not properly sanitised and escaped before being used in a SQL statement via the dk speakout...