CVE-2022-0867

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

The Pricing Table WordPress plugin before 3.6.1 fails to properly sanitize and escape user supplied POST data before it is being interpolated in an SQL statement and then executed via an AJAX action available to unauthenticated users

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
Unknown	Pricing Table Plugin	>= 3.6.1, < 3.6.1

References

https://wpscan.com/vulnerability/62803aae-9896-410b-9398-3497a838e494Exploit, Third Party Advisory
https://wpscan.com/vulnerability/62803aae-9896-410b-9398-3497a838e494Exploit, Third Party Advisory

Timeline

Published: May 16, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-08686.1Open Redirect in GitHub repository medialize/uri.js prior to 1.19.10.CVE-2022-08696.1Multiple Open Redirect in GitHub repository nitely/spirit prior to 0.12.3.CVE-2022-08705.3Server-Side Request Forgery (SSRF) in GitHub repository gogs/gogs prior to 0.12.5.CVE-2022-08719.1Missing Authorization in GitHub repository gogs/gogs prior to 0.12.5.CVE-2022-08734.8The Gmedia Photo Gallery WordPress plugin before 1.20.0 does not sanitise and escape the Album's name before outputting it in pages/posts wi CVE-2022-08744.8The WP Social Buttons WordPress plugin through 2.1 does not sanitise and escape its settings, allowing high privilege users such as admin to CVE-2022-08754.3The Google Authenticator WordPress plugin before 1.0.5 does not have CSRF check when saving its settings, and does not sanitise as well as e CVE-2022-08764.8The Social comments by WpDevArt WordPress plugin before 2.5.0 does not sanitise and escape its settings, allowing high privilege users such CVE-2022-08775.4Cross-site Scripting (XSS) - Stored in GitHub repository bookstackapp/bookstack prior to v22.02.3.CVE-2022-08786.5Electric Vehicle (EV) commonly utilises the Combined Charging System (CCS) for DC rapid charging. To exchange important messages such as the CVE-2022-08796.1The Caldera Forms WordPress plugin before 1.9.7 does not validate and escape the cf-api parameter before outputting it back in the response,CVE-2022-08805.4Cross-site Scripting (XSS) - Stored in GitHub repository star7th/showdoc prior to 2.10.2.