CVE-2022-0739

PoC —

CVSS 3.1

9.8 critical

EPSS

37%p98

Published

Mar 21, 2022 (Mar 21, 2022)

Modified

Jun 17, 2026

Description

The BookingPress WordPress plugin before 1.0.11 fails to properly sanitize user supplied POST data before it is used in a dynamically constructed SQL query via the bookingpress_front_get_category_services AJAX action (available to unauthenticated users), leading to an unauthenticated SQL Injection

Vendors: reputeinfosystems
Products: bookingpress
Ecosystems: WordPress
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (37.2%)

In the news0 stories

No ingested article mentions this CVE yet.