PoC Index

CVE-2022-1472

HIGH 7.2EPSS 1.3%

The Better Find and Replace WordPress plugin before 1.3.6 does not properly sanitise, validate and escape various parameters before using them in an SQL statement, leading to an SQL Injection

CVSS v3.1
7.2 HIGHCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0
6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
EPSS
1.27% chance of exploitation in the next 30 days, 68th percentile
Published
2022-06-20
Updated
2024-08-03

Proof-of-concept exploits (1)

References

Related