← Database

CVE-2022-0434

CRITICAL CVSS: 9.8 Published: 2022-03-07 Modified: 2026-06-17

Description

The Page View Count WordPress plugin before 2.4.15 does not sanitise and escape the post_ids parameter before using it in a SQL statement via a REST endpoint, available to both unauthenticated and authenticated users. As a result, unauthenticated attackers could perform SQL injection attacks

Affected Platforms

A3Rev Page View Count

Weakness Type

CWE-89, CWE-89

References