Lucene search
Daniel KrohmerWPVDB-ID:221BF87B-69E2-4C53-971E-8516B798C759HistoryDec 09, 2022 - 12:00 a.m.
LetsRecover < 1.2.0 - Admin+ SQLi
2022-12-0900:00:00
Daniel Krohmer
wpscan.com
10
plugin
sql injection
high privilege users
arbitrary queries
EPSS
0.001
Percentile
43.1%
The plugin does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin
PoC
Related
nvd
nvd
CVE-2022-4355
2023-01-02 22:15:17
cve
cve
CVE-2022-4355
2023-01-02 22:15:17
prion
prion
Sql injection
2023-01-02 22:15:00
cvelist
cvelist
CVE-2022-4355 LetsRecover < 1.2.0 - Admin+ SQLi
2023-01-02 21:49:20
wpexploit
wpexploit
LetsRecover < 1.2.0 - Admin+ SQLi
2022-12-09 00:00:00
fedora
fedora
[SECURITY] Fedora 36 Update: curl-7.82.0-12.fc36
2022-12-28 01:40:29
[SECURITY] Fedora 37 Update: curl-7.85.0-5.fc37
2022-12-26 01:06:29