Lucene search
K

7 matches found

OSV
OSV
added 2022/12/26 1:15 p.m.2 views

CVE-2022-4268

The Plugin Logic WordPress plugin before 1.0.8 does not sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin...

7.2CVSS5.8AI score0.00729EPSS
Exploits2References2
NVD
NVD
added 2022/12/26 1:15 p.m.9 views

CVE-2022-4268

The Plugin Logic WordPress plugin before 1.0.8 does not sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin...

7.2CVSS0.00729EPSS
Exploits2References2
Vulnrichment
Vulnrichment
added 2022/12/26 12:27 p.m.3 views

CVE-2022-4268 Plugin Logic < 1.0.8 - Admin+ SQLi

The Plugin Logic WordPress plugin before 1.0.8 does not sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin...

7.3AI score0.00729EPSS
Exploits2References2
Cvelist
Cvelist
added 2022/12/26 12:27 p.m.11 views

CVE-2022-4268 Plugin Logic < 1.0.8 - Admin+ SQLi

The Plugin Logic WordPress plugin before 1.0.8 does not sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin...

7.4AI score0.00729EPSS
Exploits2References2
CNNVD
CNNVD
added 2022/12/26 12:0 a.m.1 views

WordPress Plugin Logic SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in...

7.2CVSS7.3AI score0.00729EPSS
Exploits2References3
Positive Technologies
Positive Technologies
added 2022/12/26 12:0 a.m.2 views

PT-2022-26506 · WordPress · Plugin Logic Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: Plugin Logic WordPress plugin versions prior to 1.0.8 Description: The issue is related to a SQL injection that occurs because a parameter is not properly sanitised and escaped before being used in a SQL statement. This can be exploited by hi...

7.2CVSS7AI score0.00729EPSS
Exploits2References6
wpexploit
wpexploit
added 2022/12/02 12:0 a.m.107 views

Plugin Logic < 1.0.8 - Admin+ SQLi

The plugin does not sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin POST /wp-admin/network/plugins.php?page=plugin-logic&tabid=options%20union%20SELECT%20SLEEP16%3b%23 HTTP/1.1 Content-Type:...

7.2CVSS2.1AI score0.00729EPSS
Exploits2References1
Rows per page
Query Builder