CVE-2022-0787 Limit Login Attempts (Spam Protection) < 5.1 - Unauthenticated SQLi

2022-03-2817:23:23

CWE-89

WPScan

www.cve.org

wordpress

plugin

sql injection

EPSS

0.044

Percentile

92.5%

JSON

The Limit Login Attempts (Spam Protection) WordPress plugin before 5.1 does not sanitise and escape some parameters before using them in SQL statements via AJAX actions (available to unauthenticated users), leading to SQL Injections

CNA Affected

[
  {
    "product": "Limit Login Attempts (Spam Protection)",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "5.1",
        "status": "affected",
        "version": "5.1",
        "versionType": "custom"
      }
    ]
  }
]

References

wpscan.com/vulnerability/69329a8a-2cbe-4f99-a367-b152bd85b3dd

EPSS

0.044

Percentile

92.5%

JSON

Related for CVELIST:CVE-2022-0787