CVE-2022-1472CWE-89

Better Find and Replace < 1.3.6 - Admin+ SQLi

published June 20, 2022

CVSS
—
EPSS
1%
Percentile
69.3
In the wild
Unconfirmed
What it is

The Better Find and Replace WordPress plugin before 1.3.6 does not properly sanitise, validate and escape various parameters before using them in an SQL statement, leading to an SQL Injection

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01255 · 69.3th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2022-06-20T10:25Z
EPSS history
Timeline
  • 20 JUN 10:25Z
    Better Find and Replace < 1.3.6 - Admin+ SQLi
    cvelistv5