strategy11 Vulnerabilities and Affected Products
Vulnerabilities associated with awp_classifieds.
Products
Clear product- formidable_forms4 vulnerabilities
- Formidable Form Builder plugin for WordPress3 vulnerabilities
- awp_classifieds1 vulnerability
- Formidable Digital Signatures1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2022-3254CRITICAL | AWP Classifieds Plugin < 4.3 - Unauthenticated SQLiThe WordPress Classifieds Plugin WordPress plugin before 4.3 does not properly sanitise and escape some parameters before using them in a SQL statement via an AJAX action available to unauthenticated users and when a specific premium module is active, leading to a SQL injection | CVSS9.8v3.1 | EPSS5.16% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template | STIX |