To plugin page

Fixed

WordPress <= 5.8.2 - SQL Injection (SQLi) vulnerability

CVSS 3.1 score High severity

Monitoring Coming soon

Find out about vulnerable plugins in your websites for free.

Scan your website

Software

WordPress

Type

WordPress Core

Vulnerable versions

<= 5.8.2

Fixed in

5.8.3

PSID

44390dc8667c

CVE ID

CVE-2022-21661

Classification

SQL Injection

OWASP Top 10

A1: Injection

Required privilege

Credits

Ngocnb and Khuyenn (GiaoHangTietKiem JSC)

Publicly disclosed

2022-01-06

Details

SQL Injection (SQLi) vulnerability discovered by Ngocnb and Khuyenn (GiaoHangTietKiem JSC) in WordPress (versions <= 5.8.2).

Solution

Update WordPress to the latest available version (at least 5.8.3).

References

CVE-2022-21661 Vulnerability details Release information Technical advisory

Other known vulnerabilities for WordPress

Stored CrossSite Scripting (XSS) vulnerability

<= 5.9.1

5.4

11.03.2022

SQL Injection (SQLi) vulnerability

<= 5.8.2

7.4

06.01.2022

Stored CrossSite Scripting (XSS) vulnerability

<= 5.8.2

7.6

06.01.2022

Authenticated Object Injection in Multisites

<= 5.8.2

6.6

06.01.2022

Plugin Confusion vulnerability

< 5.8

8.1

25.11.2021

Submit vulnerabilities and become a verified Alliance member

Learn more

WordPress <= 5.8.2 - SQL Injection (SQLi) vulnerability

Details

Solution

References

Other known vulnerabilities for WordPress

Submit vulnerabilities and become a verified Alliance member

All solutions

WordPress security

Patchstack

Social

All solutions

WordPress Security

Patchstack

Social

© 2022 Patchstack

WordPress <= 5.8.2 - SQL Injection (SQLi) vulnerability

Details

Solution

References

Other known vulnerabilities for WordPress

Submit vulnerabilities and become a verified Alliance member

All solutions

WordPress security

Patchstack

Social

All solutions

WordPress Security

Patchstack

Social

© 2022 Patchstack

Let us know if we have missed a vulnerability reported elsewhere

Thank you for contributing!