CVE-2022-0846

PoC —

CVSS 3.1

9.8 critical

EPSS

9%p95

Published

Mar 28, 2022 (Mar 28, 2022)

Modified

Jun 17, 2026

Description

The SpeakOut! Email Petitions WordPress plugin before 2.14.15.1 does not sanitise and escape the id parameter before using it in a SQL statement via the dk_speakout_sendmail AJAX action, leading to an SQL Injection exploitable by unauthenticated users

Vendors: speakout\! email petitions project
Products: speakout\! email petitions
Ecosystems: WordPress
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (8.8%)

In the news0 stories

No ingested article mentions this CVE yet.