CVE-2022-3764 - Form Vibes < 1.4.5 - Admin+ SQLi

HIGH

Form Vibes < 1.4.5 - Admin+ SQLi

Published Jan 16, 2024

7.2

HIGH

CVSS 3.1

EPSS 0.98%

The plugin does not filter the "delete_entries" parameter from user requests, leading to an SQL Injection vulnerability.

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
n/a	Form Vibes	unaffected	Affected ≥ 0, < 1.4.6

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-43118		Advisory
https://wpscan.com/vulnerability/9d49df6b-e2f1-4662-90d2-84c29c3b1cb0/		exploitvdb-entrytechnical-descriptionThird Party Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner WPScan

Published Jan 16, 2024

Updated Jun 20, 2025

Reserved Oct 31, 2022

CISA Vulnrichment

Updated Jan 23, 2024

NVD

Status Modified

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner WPScan

Published Jan 16, 2024

Updated Jun 20, 2025

GitHub

No data