CVE-2022-2559: Fluent Support < 1.5.8 - Admin+ SQLi
The Fluent Support WordPress plugin before 1.5.8 does not properly sanitise, validate and escape various parameters before using them in an SQL statement, leading to an SQL Injection vulnerability exploitable by high privilege users
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-2559?
CVE-2022-2559 is considered a high severity vulnerability due to its potential for exploitation by high privilege users.
How do I fix CVE-2022-2559?
To fix CVE-2022-2559, update the Fluent Support WordPress plugin to version 1.5.8 or later.
What causes CVE-2022-2559?
CVE-2022-2559 is caused by improper sanitization, validation, and escaping of parameters used in SQL statements.
Who is affected by CVE-2022-2559?
CVE-2022-2559 affects installations of the Fluent Support WordPress plugin prior to version 1.5.8.
Can CVE-2022-2559 lead to data breaches?
Yes, if exploited, CVE-2022-2559 can lead to SQL Injection attacks, potentially resulting in data breaches.