CVE-2022-1472

PoC —

CVSS 3.1

7.2 high

EPSS

1%p68

Published

Jun 20, 2022 (Jun 20, 2022)

Modified

Jun 17, 2026

Description

The Better Find and Replace WordPress plugin before 1.3.6 does not properly sanitise, validate and escape various parameters before using them in an SQL statement, leading to an SQL Injection

Vendors: codesolz
Products: better find and replace
Ecosystems: WordPress
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news0 stories

No ingested article mentions this CVE yet.