Title Experiments Free, CVE-2022-0784
- CVE, Research URL
- Home page URL
- Application
- Published on
- Mar 28, 2022
- Research Description
- The Title Experiments Free WordPress plugin before 9.0.1 does not sanitise and escape the id parameter before using it in a SQL statement via the wpex_titles AJAX action (available to unauthenticated users), leading to an unauthenticated SQL injection
- Affected versions
-
max 9.0.1.
- Status
-
vulnerable
| Previous vulnerability researches |
|---|
| Title Experiments Free (CVE-2025-22562) , Jan 09, 2025 |
| Title Experiments Free (CVE-2022-0784) , Jun 07, 2024 |
| Title Experiments Free (CVE-2025-22561) , Jun 14, 2026 |