onyx --cves cve-2022-21664
CVE-2022-21664
- score
- <0.1
- cvss
- 7.4
- epss
- 3.8%
- published
- 2022-01-06
- kev added
- —
- first seen
WordPress versions from 4.1.34 up to 5.8.2 contain a SQL injection caused by lack of proper sanitization in one of the classes, letting attackers execute arbitrary SQL queries, exploit requires attacker to send malicious input.
Timeline
How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.
- Published
- Tracked by Onyx
Weaknesses
References 7
- https://wordpress.org/news/2022/01/wordpress-5-8-3-security-release/
- https://github.com/WordPress/wordpress-develop/commit/c09ccfbc547d75b392dbccc1ef0b4442ccd3c957
- https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-jp3p-gw8h-6x86
- https://lists.debian.org/debian-lts-announce/2022/01/msg00019.html
- https://www.debian.org/security/2022/dsa-5039
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CV4UNEC63UU5GEU47IIR4RMTZAHNEOJG/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DM6XPH3JN6V4NF4WBOJTOXZIVE6VKKE3/