1. Home
  2. CVE Database
  3. CVE-2022-0867
CRITICAL · 9.8

CVE-2022-0867

The Pricing Table WordPress plugin before 3.6.1 fails to properly sanitize and escape user supplied POST data before it is being interpolated in an SQL statement and then executed via an AJAX action a...

Vulnerability Description

The Pricing Table WordPress plugin before 3.6.1 fails to properly sanitize and escape user supplied POST data before it is being interpolated in an SQL statement and then executed via an AJAX action available to unauthenticated users

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
ReputeinfosystemsPricing Table< 3.6.1

Related Weaknesses (CWE)

CWE-89

References

FAQ

What is CVE-2022-0867?

CVE-2022-0867 is a vulnerability with a CVSS score of 9.8 (CRITICAL). The Pricing Table WordPress plugin before 3.6.1 fails to properly sanitize and escape user supplied POST data before it is being interpolated in an SQL statement and then executed via an AJAX action a...

How severe is CVE-2022-0867?

CVE-2022-0867 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2022-0867?

Check the references section above for vendor advisories and patch information. Affected products include: Reputeinfosystems Pricing Table.