Read the docs

My Wpdb Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

My Wpdb Project records in CISA KEV

No My Wpdb Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
My Wpdb 1 record HIGH

Records

1 record in My Wpdb · all components

TI-2022-01449 CVE-2022-1578 · GHSA-whc6-3293-q48f

My wpdb < 2.5 - Arbitrary SQL Query via CSRF

Priority HIGH 71

The My wpdb WordPress plugin before 2.5 is missing CSRF check when running SQL queries, which could allow attacker to make a logged in admin run arbitrary SQL query via a CSRF attack

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00464 Published 2022-11-21 Fixed in 2.5
Open these records in search →