← Back to CVE List
CVE-2022-2460
The WPDating WordPress plugin before 7.4.0 does not properly escape user input before concatenating it to certain SQL queries, leading to multiple SQL injection vulnerabilities exploitable by unauthenticated users
> MITRE Terms of Use apply – see LICENSE‑MITRE.txt