CVE-2022-2840

UNKNOWN 0.0

Zephyr Project Manager < 3.2.5 - Multiple Unauthenticated SQLi

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

The Zephyr Project Manager WordPress plugin before 3.2.5 does not sanitise and escape various parameters before using them in SQL statements via various AJAX actions available to both unauthenticated and authenticated users, leading to SQL injections

CWE	CWE-89
Vendor	unknown
Product	zephyr project manager
Published	Sep 19, 2022
Last Updated	Aug 3, 2024

Stay Ahead of the Next One

Get instant alerts for unknown zephyr project manager

Be the first to know when new unknown vulnerabilities affecting unknown zephyr project manager are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Unknown / Zephyr Project Manager

3.2.5 < 3.2.5

References

NVD ↗ CVE.org ↗ EPSS Data ↗

wpscan.com: https://wpscan.com/vulnerability/13d8be88-c3b7-4d6e-9792-c98b801ba53c packetstormsecurity.com: http://packetstormsecurity.com/files/168652/WordPress-Zephyr-Project-Manager-3.2.42-SQL-Injection.html

Credits

Rizacan TUFAN