Read the docs

Nirweb

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Nirweb records in CISA KEV

No Nirweb vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Nirweb Support 1 record MEDIUM

Records

1 record in Nirweb Support · all components

TI-2022-00690 CVE-2022-0781 · GHSA-8m8m-7fgv-2g6f

Nirweb support < 2.8.2 - Unauthenticated SQLi

Priority MEDIUM 57

The Nirweb support WordPress plugin before 2.8.2 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action (available to unauthenticated users), leading to an SQL injection

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.1305 Published 2022-05-23 Fixed in 2.8.2 CWE-89
Open these records in search →