2 matches found
CVE-2022-0784
The Title Experiments Free WordPress plugin before 9.0.1 does not sanitise and escape the id parameter before using it in a SQL statement via the wpextitles AJAX action available to unauthenticated users, leading to an unauthenticated SQL injection...
9.8CVSS5.6AI score0.10079EPSS
SaveExploits2References3
CVE-2022-0784: Improper Neutralization of Special Elements used in an SQL Command
The Title Experiments Free WordPress plugin before 9.0.1 does not sanitise and escape the id parameter before using it in a SQL statement via the wpextitles AJAX action available to unauthenticated users, leading to an unauthenticated SQL injection...
9.8CVSS8.2AI score0.10079EPSS
SaveExploits2References2
20