CVE-2022-3254
The WordPress Classifieds Plugin WordPress plugin before 4.3 does not properly sanitise and escape some parameters before using them in a SQL statement via an AJAX action available to unauthenticated users and when a specific premium module is active, leading to a SQL injection
- Score
- CVSS 3.1 9.8 Critical
- Status
- Modified - contact@wpscan.com
- Published
- 2022-10-31
- Last modified
- 2025-05-06
- Weaknesses
- CWE-89
Affected products
- Awp Classifieds (Strategy11)
- Wordpress Classifieds Plugin Ad Directory Listings By Awp Classifieds (Unknown)
References
- https://wpscan.com/vulnerability/546c47c2-5b4b-46db-b754-c6b43aef2660
