← Back

Devbunch

devbunch

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Master Elements
master_elements
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-0693
1Devbunch
1Master Elements
Jun 17, 2026
Apr 25, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The Master Elements WordPress plugin through 8.0 does not validate and escape the meta_ids parameter of its remove_post_meta_condition AJAX action (available to both unauthenticated and authenticated users) before using...Show more
The Master Elements WordPress plugin through 8.0 does not validate and escape the meta_ids parameter of its remove_post_meta_condition AJAX action (available to both unauthenticated and authenticated users) before using it in a SQL statement, leading to an unauthenticated SQL InjectionShow less