CVE-2022-45822 - WordPress Advanced Booking Calendar Plugin <= 1.7.1 is vulnerable to SQL Injection

CRITICAL

WordPress Advanced Booking Calendar Plugin <= 1.7.1 is vulnerable to SQL Injection

Published Dec 5, 2022

10.0

CRITICAL

CVSS 3.1

EPSS 0.81%

Unauth. SQL Injection (SQLi) vulnerability in Advanced Booking Calendar plugin <= 1.7.1 on WordPress.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

unaffected

Version	Status	Constraints
-	affected	<=1.7.1

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-48676		Advisory
https://patchstack.com/database/vulnerability/advanced-booking-calendar/wordpress-advanced-booking-calendar-plugin-1-7-1-unauth-sql-injection-sqli-vulnerability?_s_id=cve		vdb-entryThird Party Advisory