CVE-2022-0190

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

The Ad Invalid Click Protector (AICP) WordPress plugin before 1.2.6 is affected by a SQL Injection in the id parameter of the delete action.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

VendorProductVersions
UnknownAd Invalid Click Protector (AICP)>= 1.2.6, < 1.2.6

References

Timeline

Published
Feb 14, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-01916.5The Ad Invalid Click Protector (AICP) WordPress plugin before 1.2.7 does not have CSRF check deleting banned users, which could allow attackCVE-2022-01927.8A DLL search path vulnerability was reported in Lenovo PCManager prior to version 4.0.40.2175 that could allow privilege escalation.CVE-2022-01936.1The Complianz WordPress plugin before 6.0.0 does not escape the s parameter before outputting it back in an attribute in an admin page, leadCVE-2022-01949.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required tCVE-2022-01968.8phoronix-test-suite is vulnerable to Cross-Site Request Forgery (CSRF)CVE-2022-01978.8phoronix-test-suite is vulnerable to Cross-Site Request Forgery (CSRF)CVE-2022-01987.1corenlp is vulnerable to Improper Restriction of XML External Entity ReferenceCVE-2022-01994.3The Coming soon and Maintenance mode WordPress plugin before 3.6.8 does not have CSRF check in its coming_soon_send_mail AJAX action, allowiCVE-2022-02005.4Themify Portfolio Post WordPress plugin before 1.1.7 does not sanitise and escape the num_of_pages parameter before outputting it back the rCVE-2022-02016.1The Permalink Manager Lite WordPress plugin before 2.2.15 and Permalink Manager Pro WordPress plugin before 2.2.15 do not sanitise and escapCVE-2022-02035.3Improper Access Control in GitHub repository crater-invoice/crater prior to 6.0.2.CVE-2022-02048.8A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could pass specially craft
CVE-2022-0190: High severity, CVSS 8.8 | Vulnix