CVE Daily

CVE-2022-4358

The WP RSS By Publishers WordPress plugin through 0.1 does not properly sanitize...

High CVSS 7.2

Overview

The WP RSS By Publishers WordPress plugin through 0.1 does not properly sanitize and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin

CWE: N/A Published: 2023-01-02T22:15:17.497
Risk analysis

This vulnerability is rated 🟠 HIGH.

  • CVSS: 7.2 (HIGH)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags