Wp User Merger Project

Wp User Merger

3 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2022-3865

Exploit
  • EPSS 0.52%
  • Published 28.11.2022 14:15:18
  • Last modified 25.04.2025 15:15:32

The WP User Merger WordPress plugin before 1.5.3 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as admin

8.8

CVE-2022-3848

Exploit
  • EPSS 0.31%
  • Published 28.11.2022 14:15:17
  • Last modified 25.04.2025 18:15:24

The WP User Merger WordPress plugin before 1.5.3 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as admin

8.8

CVE-2022-3849

Exploit
  • EPSS 0.4%
  • Published 28.11.2022 14:15:17
  • Last modified 28.04.2025 18:15:43

The WP User Merger WordPress plugin before 1.5.3 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as admin