CVE-2022-1472

CVE-2022-1472: Better Find and Replace < 1.3.6 - Admin+ SQLi

Vendor Unknown
Product Better Find and Replace
Weakness CWE-89 · SQLi
Published June 20, 2022
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Better Find and Replace WordPress plugin before 1.3.6 does not properly sanitise, validate and escape various parameters before using them in an SQL statement, leading to an SQL Injection

Key dates

02Disclosure timeline

June 20, 2022 CVE published
August 3, 2024 Record updated