Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Usersultra Subscribe
Filtered by product Users Ultra
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-0769 1 Usersultra 1 Users Ultra 2022-05-04 7.5 HIGH 9.8 CRITICAL
The Users Ultra WordPress plugin through 3.1.0 fails to properly sanitize and escape the data_target parameter before it is being interpolated in an SQL statement and then executed via the rating_vote AJAX action (available to both unauthenticated and authenticated users), leading to an SQL Injection.