CVE-2022-1800

Export any WordPress data to XML/CSV < 1.3.5 - Admin+ SQL Injection

EPSS 1.2%CWE-89

The Export any WordPress data to XML/CSV WordPress plugin before 1.3.5 does not sanitize the cpt POST parameter when exporting post data before using it in a database query, leading to an SQL injection vulnerability.

Produtos afetados

Unknown · Export any WordPress data to XML/CSV

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://wpscan.com/vulnerability/4267109c-0ca2-441d-889d-fb39c235f128