Aller au contenu
Se connecter
7.2 Élevée

CVE-2022-4355 The LetsRecover WordPress plugin before 1.2.0 does not properly sanitise and escape a parameter before using it in a SQL…

Description

The LetsRecover WordPress plugin before 1.2.0 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin

Produits et versions touchés

Produit Versions touchées Corrigé en
LetsRecover 1.2 premières → < 1.2.0 1.2.0

Autres CVE de LetsRecover

Les 3 CVE de LetsRecover →
CVE-2022-4356 The LetsRecover WordPress plugin before 1.2.0 does not properly sanitise and escape a parameter before using it in a SQL… 7.2 Élevée CVE-2022-4357 The LetsRecover WordPress plugin before 1.2.0 does not properly sanitise and escape a parameter before using it in a SQL… 9.8 Critique
Suivre cette CVE