Read the docs

Speakout! Email Petitions Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Speakout! Email Petitions Project records in CISA KEV

No Speakout! Email Petitions Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Speakout! Email Petitions 1 record MEDIUM

Records

1 record in Speakout! Email Petitions · all components

TI-2022-00752 CVE-2022-0846 · GHSA-v734-49qc-6vhm

SpeakOut! Email Petitions < 2.14.15.1 - Unauthenticated SQLi

Priority MEDIUM 53

The SpeakOut! Email Petitions WordPress plugin before 2.14.15.1 does not sanitise and escape the id parameter before using it in a SQL statement via the dk_speakout_sendmail AJAX action, leading to an SQL Injection explo…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08785 Published 2022-03-28 Fixed in 2.14.15.1 CWE-89
Open these records in search →