CVE-2022-3254

PoC —

CVSS 3.1

9.8 critical

EPSS

5%p92

Published

Oct 31, 2022 (Oct 31, 2022)

Modified

Jun 17, 2026

Description

The WordPress Classifieds Plugin WordPress plugin before 4.3 does not properly sanitise and escape some parameters before using them in a SQL statement via an AJAX action available to unauthenticated users and when a specific premium module is active, leading to a SQL injection

Vendors: strategy11
Products: awp classifieds
Ecosystems: WordPress
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (5.5%)

In the news0 stories

No ingested article mentions this CVE yet.