CVE-2022-3254 — AWP Classifieds Plugin < 4.3 - Unauthenticated SQLi
The WordPress Classifieds Plugin WordPress plugin before 4.3 does not properly sanitise and escape some parameters before using them in a SQL statement via an AJAX action availa…
Published: 2022-10-31 · CVSS: 9.8 · CVSS 3.1
The WordPress Classifieds Plugin WordPress plugin before 4.3 does not properly sanitise and escape some parameters before using them in a SQL statement via an AJAX action available to unauthenticated users and when a specific premium module is active, leading to a SQL injection
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7