CVE-2022-0771

9.8 criticalEPSS 1.6%

Critical (9.8) in marketingheroes sitesupercharger. EPSS 1.6% chance of exploitation in the next 30 days.

The SiteSuperCharger WordPress plugin before 5.2.0 does not validate, sanitise and escape various user inputs before using them in SQL statements via AJAX actions (available to both unauthenticated and authenticated users), leading to Unauthenticated SQL Injections

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.6% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2022-05-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

marketingheroes:sitesupercharger

References

https://wpscan.com/vulnerability/6139e732-88f2-42cb-9dc3-42ad49731e75
https://wpscan.com/vulnerability/6139e732-88f2-42cb-9dc3-42ad49731e75

Check your stack JSON