cleantalk
Vulnerabilities and Security Researches

Melapress File Monitor, CVE-2022-2269

CVE, Research URL

CVE-2022-2269

Published on
Aug 08, 2022
Research Description
The Website File Changes Monitor WordPress plugin before 1.8.3 does not sanitise and escape user input before using it in a SQL statement via an action available to users with the manage_options capability (by default admins), leading to an SQL injection
Affected versions
Min -, max 1.8.3.
Status
vulnerable