CVE-2022-2754

CRITICAL 9.8CVE-2022-2754 · Published 19/09/2022 · updated 17/06/2026

Package	Affected versions	Patched versions
ketchup restaurant reservations ketchup_restaurant_reservations_project	`≤ 1.0.0`	No fix yet

Description

The Ketchup Restaurant Reservations WordPress plugin through 1.0.0 does not validate and escape some reservation parameters before using them in SQL statements, which could allow unauthenticated attackers to perform SQL Injection attacks

References

wpscan.com/vulnerability/e3c6d137-ff6e-432a-a21a-b36dc81f73c5 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free