cbcvebase.

Title Experiments Free Project Title Experiments Free vulnerabilities

1 known vulnerability affecting title_experiments_free_project/title_experiments_free.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
1
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2022-0784P1CRITICALCVSS 9.8ExploitedPoCfixed in 9.0.12022-03-28
CVE-2022-0784 [CRITICAL] CWE-89 CVE-2022-0784: The Title Experiments Free WordPress plugin before 9.0.1 does not sanitise and escape the id paramet The Title Experiments Free WordPress plugin before 9.0.1 does not sanitise and escape the id parameter before using it in a SQL statement via the wpex_titles AJAX action (available to unauthenticated users), leading to an unauthenticated SQL injection
nvd
Title Experiments Free Project Title Experiments Free vulnerabilities | cvebase