CVE-2022-29411

SQL Injection (SQLi) vulnerability in Mufeng's Hermit 音乐播放器 plugin <= 3.1.6 on WordPress allows attackers to execute SQLi attack via (&id).

Score

CVSS 3.1 9.8 Critical

Status

Modified - audit@patchstack.com

Published

2022-04-28

Last modified

2026-04-28

Weaknesses

CWE-89

Affected products

• Hermit (Hermit Project)
• Hermit Wordpress Plugin (Mufeng)

References

• https://patchstack.com/database/vulnerability/hermit/wordpress-hermit-plugin-3-1-6-unauthenticated-sql-injection-sqli-v…
• https://wordpress.org/plugins/hermit/