← Back to browse · API

CVE-2022-3254

Severity
CRITICAL
CVSS
9.8
EPSS
0.05156
Risk score
41.0
CISA KEV
No
PoC
No
Published
2022-10-31
Modified
2025-05-06
First seen
2026-08-07
Aliases
EUVD-2022-42658, GHSA-XM5J-QJXJ-574H
Products
Unknown:WordPress Classifieds Plugin – Ad Directory & Listings by AWP Classifieds 4.3 <4.3
Sources
euvd EUVD-2022-42658

Description

The WordPress Classifieds Plugin WordPress plugin before 4.3 does not properly sanitise and escape some parameters before using them in a SQL statement via an AJAX action available to unauthenticated users and when a specific premium module is active, leading to a SQL injection

References