Known CVE

Cryptocurrency Widgets Pack < 2.0 - SQL Injection

The plugin does not sanitise and escape some parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.

CVE-2022-4059

Critical2022CVSS 9.8CWE-89

time-based-sqli · cve2022 · wp · wp-plugin · wordpress · wpscan · sqli · blocksera

Verified scans run this check after you prove you own the site.

All known CVEs View the checks catalog National Vulnerability Database

Scan a website