blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

← Back to CVE list

CVE-2022-1182

HIGH 8.8 CVSS 3.1
Published
May 16, 2022
Last modified
June 17, 2026
NVD status
Modified
Reported by
contact@wpscan.com
Weakness
CWE-89
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

The Visual Slide Box Builder WordPress plugin through 3.2.9 does not sanitise and escape various parameters before using them in SQL statements via some of its AJAX actions available to any authenticated users (such as subscriber), leading to SQL Injections

Affected products and versions

  • Unknown Visual Slide Box Builder — From 3.2.9 (including) to 3.2.9 (including)
  • visual_slide_box_builder_project visual_slide_box_builder — Up to and including 3.2.9

References

  • wpscan.com https://wpscan.com/vulnerability/01d108bb-d134-4651-9c74-babcc88da177 Exploit, Third Party Advisory
  • nvd.nist.gov Official NVD record