Read the docs

Presspage

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Presspage records in CISA KEV

No Presspage vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Bestbooks 1 record MEDIUM Smarty For Wordpress 1 record LOW

Records

1 record in Bestbooks · all components

TI-2022-00734 CVE-2022-0827 · GHSA-fw4m-gxhm-8fj4

Bestbooks <= 2.6.3 - Unauthenticated SQLi

Priority MEDIUM 54

The Bestbooks WordPress plugin through 2.6.3 does not sanitise and escape some parameters before using them in a SQL statement via an AJAX action, leading to an SQL Injection exploitable by unauthenticated users

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.09127 Published 2022-06-13 No fix listed CWE-89
Open these records in search →