CVE-2022-3300: Form Maker by 10Web < 1.15.6 - Admin+ SQLI
The Form Maker by 10Web WordPress plugin before 1.15.6 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-3300?
CVE-2022-3300 is a vulnerability found in the Form Maker by 10Web WordPress plugin before version 1.15.6.
How does CVE-2022-3300 impact users?
CVE-2022-3300 allows high privilege users, such as admin, to exploit a SQL injection vulnerability in the plugin.
What is the severity rating of CVE-2022-3300?
CVE-2022-3300 has a severity rating of 7.2 (High).
How can I fix CVE-2022-3300?
To fix CVE-2022-3300, update the Form Maker by 10Web WordPress plugin to version 1.15.6 or later.
Where can I find more information about CVE-2022-3300?
You can find more information about CVE-2022-3300 at the following reference: [https://wpscan.com/vulnerability/ddc9ed69-d942-4fad-bbf4-1be3b86460d9](https://wpscan.com/vulnerability/ddc9ed69-d942-4fad-bbf4-1be3b86460d9)