Skip to content
Sign in
7.2 High

CVE-2022-4360 The WP RSS By Publishers WordPress plugin through 0.1 does not properly sanitize and escape a parameter before using…

Description

The WP RSS By Publishers WordPress plugin through 0.1 does not properly sanitize and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin

Affected products and versions

Product Affected versions Fixed in
WP RSS By Publishers 0.1 earliest → 0.1 No fix stated

Other CVEs of WP RSS By Publishers

The 3 CVEs of WP RSS By Publishers →
CVE-2022-4358 The WP RSS By Publishers WordPress plugin through 0.1 does not properly sanitize and escape a parameter before using… 7.2 High CVE-2022-4359 The WP RSS By Publishers WordPress plugin through 0.1 does not properly sanitize and escape a parameter before using… 7.2 High
Track this CVE