blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

← Back to CVE list

CVE-2022-2559

HIGH 7.2 CVSS 3.1
Published
August 29, 2022
Last modified
June 17, 2026
NVD status
Modified
Reported by
contact@wpscan.com
Weakness
CWE-89
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Description

The Fluent Support WordPress plugin before 1.5.8 does not properly sanitise, validate and escape various parameters before using them in an SQL statement, leading to an SQL Injection vulnerability exploitable by high privilege users

Affected WordPress components

  • Fluent Support – Helpdesk & Customer Support Ticket System Plugin · fluent-support
    Confirmed match Active
    From 1.5.8 (including) to 1.5.8 (excluding)
    View on WordPress.org

A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.

Affected products and versions

  • Unknown Fluent Support – WordPress Helpdesk and Customer Support Ticket Plugin — From 1.5.8 (including) to 1.5.8 (excluding)
  • wpmanageninja fluent_support — Before 1.5.8

References

  • wpscan.com https://wpscan.com/vulnerability/062599ce-c630-487e-bb43-c3b27a62b9ec Exploit, Third Party Advisory
  • nvd.nist.gov Official NVD record