Lucene search
PRIOn knowledge basePRION:CVE-2022-1690HistoryJun 08, 2022 - 10:15 a.m.
Sql injection
2022-06-0810:15:00
PRIOn knowledge base
www.prio-n.com
6
The Note Press WordPress plugin through 0.1.10 does not sanitise and escape the ids from the bulk actions before using them in a SQL statement in an admin page, leading to an SQL injection
| CPE | Name | Operator | Version |
|---|---|---|---|
| note_press | le | 0.1.10 |
Related
wpexploit
wpexploit
Note Press <= 0.1.10 - Admin+ SQLi via Bulk Actions
2022-05-09 00:00:00
cnvd
cnvd
WordPress Note Press plugin SQL injection vulnerability
2022-06-13 00:00:00
nvd
nvd
CVE-2022-1690
2022-06-08 10:15:10
cvelist
cvelist
CVE-2022-1690 Note Press <= 0.1.10 - Admin+ SQLi via Bulk Actions
2022-06-06 08:51:26
cve
cve
CVE-2022-1690
2022-06-08 10:15:10
wpvulndb
wpvulndb
Note Press <= 0.1.10 - Admin+ SQLi via Bulk Actions
2022-05-09 00:00:00
patchstack
patchstack