Aller au contenu
Se connecter
9.8 Critique

CVE-2022-4357 The LetsRecover WordPress plugin before 1.2.0 does not properly sanitise and escape a parameter before using it in a SQL…

Description

The LetsRecover WordPress plugin before 1.2.0 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.

Produits et versions touchés

Produit Versions touchées Corrigé en
LetsRecover 1.2 premières → < 1.2.0 1.2.0

Autres CVE de LetsRecover

Les 3 CVE de LetsRecover →
CVE-2022-4355 The LetsRecover WordPress plugin before 1.2.0 does not properly sanitise and escape a parameter before using it in a SQL… 7.2 Élevée CVE-2022-4356 The LetsRecover WordPress plugin before 1.2.0 does not properly sanitise and escape a parameter before using it in a SQL… 7.2 Élevée
Suivre cette CVE