Not rated
CVE-2022-2593 The Better Search Replace WordPress plugin before 1.4.1 does not properly sanitise and escape table data before…
Description
The Better Search Replace WordPress plugin before 1.4.1 does not properly sanitise and escape table data before inserting it into a SQL query, which could allow high privilege users to perform SQL Injection attacks
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Better Search Replace 1.4 | earliest → < 1.4.1 | 1.4.1 |