Skip to content
OpenAdvisories
High · 7.2 CVE-2022-3131 EUVD-2022-42558GHSA-p363-w8j5-w3rq

Search Logger <= 0.9 - Admin+ SQLi

Published Oct 17, 2022 · Updated May 14, 2025 · Assigned by WPScan

Description

The Search Logger WordPress plugin through 0.9 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users

Affected products

VendorProductAffectedFixed
— Search Logger – Know What Your Visitors Search 0.9 – ≤ 0.9 —

References