Aller au contenu
Se connecter
9.8 Critique

CVE-2022-3915 The Dokan WordPress plugin before 3.7.6 does not properly sanitise and escape a parameter before using it in a SQL…

Description

The Dokan WordPress plugin before 3.7.6 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users

Produits et versions touchés

Produit Versions touchées Corrigé en
Dokan 2.6 2.6.8 → < 3.7.6 3.7.6

Autres CVE de Dokan

Les 3 CVE de Dokan →
CVE-2026-107776 Dokan < 5.3.3 - Vendor+ Reverse Withdrawal Ledger Credit Without Payment via Discount Coupon 2.2 Faible CVE-2022-3194 The Dokan WordPress plugin before 3.6.4 allows vendors to inject arbitrary javascript in product reviews, which may… 5.4 Moyenne
Suivre cette CVE