Unrated

Dokan < 3.7.6 - Unauthenticated SQLi

CVE-2022-3915 First seen on SecPulse Dec 13, 2022

Original description The description as published by the source.

The Dokan WordPress plugin before 3.7.6 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
report wpscan.com
web wordpress.org

Key facts

Severity: Unrated
Published: Dec 13, 2022
First seen on SecPulse: Dec 13, 2022

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:57