← Back

Nirweb Support

nirweb_support

Vendor: Nirweb • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-0781
1Nirweb
1Nirweb Support
Jun 17, 2026
May 23, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The Nirweb support WordPress plugin before 2.8.2 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action (available to unauthenticated users), leading to an SQL injection