VULNERABILITY INTELLIGENCE

CVE-2022-0693

CVSS score9.8 CRITICAL

EPSS probability6.92%

CISA KEVNot currently listed

Published2022-04-25

Last modified2026-06-17

Description

The Master Elements WordPress plugin through 8.0 does not validate and escape the meta_ids parameter of its remove_post_meta_condition AJAX action (available to both unauthenticated and authenticated users) before using it in a SQL statement, leading to an unauthenticated SQL Injection