Known CVE

WP User <= 7.0 - Unauthenticated SQLi

The WP User WordPress plugin through 7.0 does not properly sanitize and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users.

CVE-2022-4049

Critical2022CVSS 9.8CWE-89

time-based-sqli · cve2022 · sqli · wpscan · wordpress · wp-plugin · wp · wp-user

Verified scans run this check after you prove you own the site.

All known CVEs View the checks catalog National Vulnerability Database

Scan a website