Skip to main content

Sitesupercharger

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest
CVE-2022-0771 CRITICAL POC Act Now

The SiteSuperCharger WordPress plugin before 5.2.0 does not validate, sanitise and escape various user inputs before using them in SQL statements via AJAX actions (available to both unauthenticated. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

SQLi WordPress Sitesupercharger
NVD WPScan
CVSS 3.1
9.8
EPSS
1.6%
CVE-2022-0771
EPSS 2% CVSS 9.8
CRITICAL POC Act Now

The SiteSuperCharger WordPress plugin before 5.2.0 does not validate, sanitise and escape various user inputs before using them in SQL statements via AJAX actions (available to both unauthenticated. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

SQLi WordPress Sitesupercharger
NVD WPScan

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy