CVE-2022-1690

PoC ×2—

CVSS 3.1

2.7 low

EPSS

<1%p54

Published

Jun 8, 2022 (Jun 8, 2022)

Modified

Jun 17, 2026

Description

The Note Press WordPress plugin through 0.1.10 does not sanitise and escape the ids from the bulk actions before using them in a SQL statement in an admin page, leading to an SQL injection

Vendors: datainterlock
Products: note press
Ecosystems: WordPress
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.