← CVE Intelligence

CVE-2022-3915

Dokan < 3.7.6 - Unauthenticated SQLi PUBLISHED

Description (CNA)

The Dokan WordPress plugin before 3.7.6 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users

Affected (CNA)

Vendor / productVersions
Unknown / Dokanaffected 2.6.8 before 3.7.6

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.