CVSS v3
9.8
CRITICAL
EPSS Score
84.8%
exploit probability
CISA KEV
No
known exploited
Exploitation
—
SSVC status
The WordPress Classifieds Plugin WordPress plugin before 4.3 does not properly sanitise and escape some parameters before using them in a SQL statement via an AJAX action available to unauthenticated users and when a specific premium module is active, leading to a SQL injection
The WordPress Classifieds Plugin WordPress plugin before 4.3 does not properly sanitise and escape some parameters before using them in a SQL statement via an AJAX action available to unauthenticated users and when a specific premium module is active, leading to a SQL injection
Active exploitation of CVE-2022-3254 has not been confirmed. The EPSS score is 84.8%, indicating the estimated probability of exploitation in the next 30 days.
CVE-2022-3254 has a CVSS v3 base score of 9.8 (CRITICAL severity).
Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.
Ranked by exploit probability (EPSS).