← Back

Buddybadges

buddybadges

Vendor: Buddybadges Project • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-3925
1Buddybadges Project
1Buddybadges
Jun 17, 2026
Dec 12, 2022
N/A· v4
7.2 HIGH· v3
N/A· v2
The buddybadges WordPress plugin through 1.0.0 does not sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users