← CVE Intelligence

CVE-2022-2460

WPDating < 7.4.0 - Multiple Unauthenticated SQLi PUBLISHED

Description (CNA)

The WPDating WordPress plugin before 7.4.0 does not properly escape user input before concatenating it to certain SQL queries, leading to multiple SQL injection vulnerabilities exploitable by unauthenticated users

Affected (CNA)

Vendor / productVersions
Unknown / WPDatingaffected 0 before 7.4.0

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.