CVE-2022-1472
High
Description
The Better Find and Replace WordPress plugin before 1.3.6 does not properly sanitise, validate and escape various parameters before using them in an SQL statement, leading to an SQL Injection
SeverityHigh
CVSS7.2
Exploit probability—
ProductCodesolz Better Find And Replace
PublishedJun 20, 2022
First seenJun 20, 2022
Weakness typeCWE-89SQL injection
How to fix
Update
- codesolz better_find_and_replace1.3.6 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| codesolz better_find_and_replace | v < 1.3.6 | 1.3.6 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.