Severity
High
Analysis Summary
CVE-2022-3254
The WordPress Classifieds Plugin WordPress plugin before 4.3 does not properly sanitise and escape some parameters before using them in a SQL statement via an AJAX action available to unauthenticated users and when a specific premium module is active, leading to a SQL injection
Impact
Unauthorized Access
Indicators Of Compromise
CVE
- CVE-2022-3254
Affected Vendors
WordPress
Affected Products
- AWP Classifieds Plugin for WordPress 4.3
Remediation
Refer to WordPress Plugin Website for patch, upgrade or suggested workaround information.