cbcvebase.

Devbunch Master Elements vulnerabilities

1 known vulnerability affecting devbunch/master_elements.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2022-0693P2CRITICALCVSS 9.8PoC≤ 8.02022-04-25
CVE-2022-0693 [CRITICAL] CWE-89 CVE-2022-0693: The Master Elements WordPress plugin through 8.0 does not validate and escape the meta_ids parameter The Master Elements WordPress plugin through 8.0 does not validate and escape the meta_ids parameter of its remove_post_meta_condition AJAX action (available to both unauthenticated and authenticated users) before using it in a SQL statement, leading to an unauthenticated SQL Injection
nvd
Devbunch Master Elements vulnerabilities | cvebase