wp_user_merger_project - MidnightBSD Security Advisories

CVE-2022-3848

The WP User Merger WordPress plugin before 1.5.3 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as admin

Products Affected

Vendor	Product	Version
wp_user_merger_project	wp_user_merger	*

CVE-2022-3849

The WP User Merger WordPress plugin before 1.5.3 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as admin

Products Affected

Vendor	Product	Version
wp_user_merger_project	wp_user_merger	*

CVE-2022-3865

The WP User Merger WordPress plugin before 1.5.3 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as admin

Products Affected

Vendor	Product	Version
wp_user_merger_project	wp_user_merger	*

Advisories for wp_user_merger_project