CVE-2022-0788

CVE-2022-0788: WP Fundraising Donation and Crowdfunding Platform < 1.5.0 - Unauthenticated SQLi

Vendor Unknown

Product WP Fundraising Donation and Crowdfunding Platform

Weakness CWE-89 · SQLi

Published June 6, 2022

Last update August 2, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The WP Fundraising Donation and Crowdfunding Platform WordPress plugin before 1.5.0 does not sanitise and escape a parameter before using it in a SQL statement via one of it's REST route, leading to an SQL injection exploitable by unauthenticated users

Key dates

02Disclosure timeline

June 6, 2022 CVE published

August 2, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-0788 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/89.html

Related vulnerabilities

CVE-2022-0788: WP Fundraising Donation and Crowdfunding Platform < 1.5.0 - Unauthenticated SQLi

01Description

02Disclosure timeline

03References

04Related CVE