CVE-2022-2754

critical · 9.8

The Ketchup Restaurant Reservations WordPress plugin through 1.0.0 does not validate and escape some reservation parameters before using them in SQL statements, which could allow unauthenticated attackers to perform SQL Injection attacks

9.8

CVSS

38.3%

EPSS (exploit prob.)

98th

EPSS percentile

2022-09-19

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-89

Affected products

Vendor	Product	Affected versions
ketchup_restaurant_reservations_project	ketchup_restaurant_reservations	<= 1.0.0

Check a specific version with /api/v1/cve/match.

References

https://wpscan.com/vulnerability/e3c6d137-ff6e-432a-a21a-b36dc81f73c5
https://wpscan.com/vulnerability/e3c6d137-ff6e-432a-a21a-b36dc81f73c5

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2022-2754