CVE-2022-3764
Assigner: WPScan
Published: 2024-01-16T15:50:50.054Z
State: PUBLISHED
title: Form Vibes < 1.4.5 - Admin+ SQLi
problemTypes: descriptions: description: CWE-89 SQL Injection
type: CWE
affected: vendor: Unknown
product: Form Vibes
versions: status: affected
versionType: semver
version: 0
lessThan: 1.4.6
defaultStatus: unaffected
collectionURL: https://wordpress.org/plugins
descriptions: value: The plugin does not filter the "delete_entries" parameter from user requests, leading to an SQL Injection vulnerability.
credits: value: Nguyen Duy Quoc Khanh
type: finder
value: WPScan
type: coordinator
source: discovery: EXTERNAL
x_generator: engine: WPScan CVE Generator