CVE-2022-3131

CVE-2022-3131: Search Logger <= 0.9 - Admin+ SQLi

Vendor Unknown
Product Search Logger – Know What Your Visitors Search
Weakness CWE-89 · SQLi
Published October 17, 2022
Last update May 14, 2025
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Search Logger WordPress plugin through 0.9 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users

Key dates

02Disclosure timeline

October 17, 2022 CVE published
May 14, 2025 Record updated