CVE-2022-1578
My wpdb < 2.5 - Arbitrary SQL Query via CSRF
HIGH 8.8EPSS 0.5%
The My wpdb WordPress plugin before 2.5 is missing CSRF check when running SQL queries, which could allow attacker to make a logged in admin run arbitrary SQL query via a CSRF attack
- Affected
- My wpdb
- CVSS v3.1 NVD
- 8.8 HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - EPSS
- 0.46% chance of exploitation in the next 30 days, 38th percentile
- Published
- 2022-11-21
- Updated
- 2025-04-30