CVE-2022-1688

low

Description

The Note Press WordPress plugin through 0.1.10 does not sanitise and escape the id parameter before using it in various SQL statement via the admin dashboard, leading to SQL Injections

References

https://wpscan.com/vulnerability/63d4444b-9b04-47f5-a692-c6c6c8ea7d92

https://bulletin.iese.de/post/note-press_0-1-10_1

Details

Source: Mitre, NVD

Published: 2022-06-08

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 4

Vector: CVSS2#AV:N/AC:L/Au:S/C:N/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 2.7

Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

Severity: Low

EPSS

EPSS: 0.00078

Detections

Analytics