VulnCheck KEV: CVE-2022-0747

The Infographic Maker WordPress plugin before 4.3.8 does not validate and escape the postid parameter before using it in a SQL statement via the qcldupvoteaction AJAX action available to unauthenticated and authenticated users, leading to an unauthenticated SQL Injection...

CVE-2022-0747

The Infographic Maker WordPress plugin before 4.3.8 does not validate and escape the postid parameter before using it in a SQL statement via the qcldupvoteaction AJAX action available to unauthenticated and authenticated users, leading to an unauthenticated SQL Injection...

PT-2022-13407

Name of the Vulnerable Software and Affected Versions Infographic Maker WordPress plugin versions prior to 4.3.8 Description The issue concerns an unauthenticated SQL Injection. It occurs because the post id parameter is not properly validated and escaped before being used in a SQL statement via...