The Better Search Replace WordPress plugin before 1.4.1 does not properly sanitise and escape table data before inserting it into a SQL query, which could allow high privilege users to perform SQL Injection attacks
CVSS 3.1HIGH 7.2·Network·High privileges·No interaction·EPSS 0.01372·Published 2022-08-22·Fixed in 1.4.1CWE-89