To plugin page

Fixed

WordPress <= 5.8.2 - SQL Injection (SQLi) vulnerability

7.4

CVSS 3.1 score High severity

Monitoring Coming soon

Find out about vulnerable plugins in your websites for free.

Scan your website

Software

WordPress

Type

WordPress Core

Vulnerable versions

<= 5.8.2

Fixed in

5.8.3

PSID

855cdb6cf1e7

CVE ID

CVE-2022-21664

Classification

SQL Injection

OWASP Top 10

A1: Injection

Required privilege

Credits

Ben Bidner

Publicly disclosed

2022-01-06

Details

SQL Injection (SQLi) vulnerability discovered by Ben Bidner in WordPress (versions <= 5.8.2).

Solution

Update WordPress to the latest available version (at least 5.8.3).

References

CVE-2022-21664 Vulnerability details Release information Technical advisory

Other known vulnerabilities for WordPress

Stored CrossSite Scripting (XSS) vulnerability

<= 5.9.1

5.4

11.03.2022

SQL Injection (SQLi) vulnerability

<= 5.8.2

06.01.2022

Stored CrossSite Scripting (XSS) vulnerability

<= 5.8.2

7.6

06.01.2022

Authenticated Object Injection in Multisites

<= 5.8.2

6.6

06.01.2022

Plugin Confusion vulnerability

< 5.8

8.1

25.11.2021

Submit vulnerabilities and become a verified Alliance member

Learn more

WordPress <= 5.8.2 - SQL Injection (SQLi) vulnerability

Details

Solution

References

Other known vulnerabilities for WordPress

Submit vulnerabilities and become a verified Alliance member

All solutions

WordPress security

Patchstack

Social

All solutions

WordPress Security

Patchstack

Social

© 2022 Patchstack

WordPress <= 5.8.2 - SQL Injection (SQLi) vulnerability

Details

Solution

References

Other known vulnerabilities for WordPress

Submit vulnerabilities and become a verified Alliance member

All solutions

WordPress security

Patchstack

Social

All solutions

WordPress Security

Patchstack

Social

© 2022 Patchstack

Let us know if we have missed a vulnerability reported elsewhere

Thank you for contributing!