AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2022-0787

CRITICAL · CVSS 9.8 EPSS 8.85%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-03-28 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2022-0787
Severity
CRITICAL
CVSS
9.8
EPSS
8.85%
WordPress

Original NVD Description

The Limit Login Attempts (Spam Protection) WordPress plugin before 5.1 does not sanitise and escape some parameters before using them in SQL statements via AJAX actions (available to unauthenticated users), leading to SQL Injections