CVE-2022-3768

ALTO 8.8CVE-2022-3768 · Published 28/11/2022 · updated 17/06/2026

In breve

CVE-2022-3768 è una vulnerabilità ALTO (CVSS 8.8) che riguarda wpsmartcontracts (wpsmartcontracts).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 4.1%, superiore al 90.8% delle vulnerabilità.
Correzione: aggiornare a 1.3.12 o successiva.

Package	Affected versions	Patched versions
wpsmartcontracts wpsmartcontracts	`< 1.3.12`	`1.3.12`

Description

The WPSmartContracts WordPress plugin before 1.3.12 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as author

References

bulletin.iese.de/post/wp-smart-contracts_1-3-11 · Exploit
wpscan.com/vulnerability/1d8bf5bb-5a17-49b7-a5ba-5f2866e1f8a3 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free