VulnCheck KEV: CVE-2022-0784

The Title Experiments Free WordPress plugin before 9.0.1 does not sanitise and escape the id parameter before using it in a SQL statement via the wpextitles AJAX action available to unauthenticated users, leading to an unauthenticated SQL injection...

CVE-2022-0784

The Title Experiments Free WordPress plugin before 9.0.1 does not sanitise and escape the id parameter before using it in a SQL statement via the wpextitles AJAX action available to unauthenticated users, leading to an unauthenticated SQL injection...

PT-2022-13437

Name of the Vulnerable Software and Affected Versions The Title Experiments Free WordPress plugin versions prior to 9.0.1 Description The issue concerns an unauthenticated SQL injection. It occurs because the id parameter is not properly sanitised and escaped before being used in a SQL statement...