CVE-2022-0867

critical · 9.8

A public exploit / detection template exists

Weaponised detection is publicly available, which meaningfully raises real-world risk regardless of CVSS. nuclei-templates →

The Pricing Table WordPress plugin before 3.6.1 fails to properly sanitize and escape user supplied POST data before it is being interpolated in an SQL statement and then executed via an AJAX action available to unauthenticated users

9.8

CVSS

13.5%

EPSS (exploit prob.)

96th

EPSS percentile

2022-05-16

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-89

Affected products

Vendor	Product	Affected versions
reputeinfosystems	pricing_table	< 3.6.1

Check a specific version with /api/v1/cve/match.

References

https://wpscan.com/vulnerability/62803aae-9896-410b-9398-3497a838e494
https://wpscan.com/vulnerability/62803aae-9896-410b-9398-3497a838e494

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2022-0867