CVE-2022-4049

CVE-2022-4049 affects the WP User WordPress plugin up to version 7.0, where an unsafely constructed SQL statement using an unvalidated parameter (id) in admin-ajax.php allows unauthenticated SQL injection. The root cause is improper sanitization/escaping of the parameter before use in the SQL sta...