CVEs (3)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Wp User Merger Project 1Wp User Merger Jun 17, 2026 Nov 28, 2022 N/A· v4 8.8 HIGH· v3 N/A· v2 The WP User Merger WordPress plugin before 1.5.3 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as admin |
1Wp User Merger Project 1Wp User Merger Jun 17, 2026 Nov 28, 2022 N/A· v4 8.8 HIGH· v3 N/A· v2 The WP User Merger WordPress plugin before 1.5.3 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as admin |
1Wp User Merger Project 1Wp User Merger Jun 17, 2026 Nov 28, 2022 N/A· v4 8.8 HIGH· v3 N/A· v2 The WP User Merger WordPress plugin before 1.5.3 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as admin |