CVE-2022-3764

Form Vibes < 1.4.5 - Admin+ SQLi

The plugin does not filter the "delete_entries" parameter from user requests, leading to an SQL Injection vulnerability.

Affected

Form Vibes

CVSS v3.1 NVD

7.2 HIGHCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

0.98% chance of exploitation in the next 30 days, 62nd percentile

Published

2024-01-16

Updated

2025-06-20

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/9d49df6b-e2f1-4662-90d2-84c29c3b1cb0/

Security advisories

• https://wpscan.com/vulnerability/9d49df6b-e2f1-4662-90d2-84c29c3b1cb0

References

• CVE Record
• NVD entry