TI-2022-03928 CVE-2022-4290 · GHSA-hfmf-h398-rr97Cyr to Lat <= 3.5 - Authenticated SQL InjectionPriority MEDIUM 41The Cyr to Lat plugin for WordPress is vulnerable to authenticated SQL Injection via the 'ctl_sanitize_title' function in versions up to, and including, 3.5 due to insufficient escaping on the user supplied parameter and…CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00766 · Published 2023-10-20 · No fix listed CWE-89