CVE-2022-0788

CRITICAL 9.8CVE-2022-0788 · Published 08/06/2022 · updated 17/06/2026

In short

CVE-2022-0788 is a CRITICAL (CVSS 9.8) vulnerability affecting fundengine (wpmet).
Chance of exploitation in the next 30 days (EPSS): 7.8%, higher than 94.6% of all vulnerabilities.
Fix: update to 1.5.0 or later.

Package	Affected versions	Patched versions
fundengine wpmet	`< 1.5.0`	`1.5.0`

Description

The WP Fundraising Donation and Crowdfunding Platform WordPress plugin before 1.5.0 does not sanitise and escape a parameter before using it in a SQL statement via one of it's REST route, leading to an SQL injection exploitable by unauthenticated users

References

wpscan.com/vulnerability/fbc71710-123f-4c61-9796-a6a4fd354828 · Exploit

More vulnerabilities in fundengine

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free