CVE-2022-2559

The Fluent Support WordPress plugin before 1.5.8 does not properly sanitise, validate and escape various parameters before using them in an SQL statement, leading to an SQL Injection vulnerability exploitable by high privilege users

CVSS v3.1

7.2 HIGHCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

1.18% chance of exploitation in the next 30 days, 66th percentile

Published

2022-08-29

Updated

2024-08-03

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/062599ce-c630-487e-bb43-c3b27a62b9ec

References

• CVE Record
• NVD entry

Related

• CVE-2022-25581
• CVE-2022-2563
• CVE-2022-2558
• CVE-2022-25630
• CVE-2022-25577
• CVE-2022-25636