Known CVE

WordPress Daily Prayer Time <2022.03.01 - SQL Injection

WordPress Daily Prayer Time plugin prior to 2022.03.01 contains a SQL injection vulnerability.. It does not sanitise and escape the month parameter before using it in a SQL statement via the get_monthly_timetable AJAX action, available to unauthenticated users, leading to SQL injection.

CVE-2022-0785

Critical2022CVSS 9.8CWE-89

time-based-sqli · cve2022 · sqli · wordpress · wp-plugin · unauth · daily-prayer-time-for-mosques · wpscan

Verified scans run this check after you prove you own the site.

All known CVEs View the checks catalog National Vulnerability Database

Scan a website