HIGH🇵🇱 Wersja polska

CVE-2022-2559

CVSS 7.2v3.1pub. 2022-08-29upd. 2024-11-21

The Fluent Support WordPress plugin before 1.5.8 does not properly sanitise, validate and escape various parameters before using them in an SQL statement, leading to an SQL Injection vulnerability exploitable by high privilege users

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

  • Wpmanageninja Fluent Support

    APP
    Wpmanageninja
    < 1.5.8
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
SQLi
CWE
References

Related vulnerabilities

CVE-2024-13568HIGH7.5ten sam produkt

The Fluent Support – Helpdesk & Customer Support Ticket System plugin for WordPress is vulnerable to Sensitive...

CVE-2024-47304HIGH8.5ten sam produkt

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shahjaha...

CVE-2023-51547HIGH7.6ten sam produkt

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPManage...

CVE-2024-47302MEDIUM5.3ten sam produkt

Missing Authorization vulnerability in Shahjahan Jewel Fluent Support fluent-support allows Exploiting Incorre...

CVE-2025-2940HIGH7.2ten sam vendor

The Ninja Tables – Easy Data Table Builder plugin for WordPress is vulnerable to Server-Side Request Forgery i...