Vulnerabilities > CVE-2022-1692 - Unspecified vulnerability in Dwbooster CP Image Store With Slideshow

CVSS 9.8 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

dwbooster

critical

NVD

Published: 2022-06-08

Updated: 2024-11-21

Summary

The CP Image Store with Slideshow WordPress plugin before 1.0.68 does not sanitise and escape the ordering_by query parameter before using it in a SQL statement in pages where the [codepeople-image-store] is embed, allowing unauthenticated users to perform an SQL injection attack

Vulnerable Configurations

Part	Description	Count
Application	Dwbooster Dwbooster CP Image Store With Slideshow 1.0 Dwbooster CP Image Store With Slideshow 1.0.1 Dwbooster CP Image Store With Slideshow 1.0.2 Dwbooster CP Image Store With Slideshow 1.0.3 Dwbooster CP Image Store With Slideshow 1.0.4 Dwbooster CP Image Store With Slideshow 1.0.5 Dwbooster CP Image Store With Slideshow 1.0.6 Dwbooster CP Image Store With Slideshow 1.0.7 Dwbooster CP Image Store With Slideshow 1.0.8 Dwbooster CP Image Store With Slideshow 1.0.9 Dwbooster CP Image Store With Slideshow 1.0.10 Dwbooster CP Image Store With Slideshow 1.0.11 Dwbooster CP Image Store With Slideshow 1.0.12 Dwbooster CP Image Store With Slideshow 1.0.13 Dwbooster CP Image Store With Slideshow 1.0.14 Dwbooster CP Image Store With Slideshow 1.0.15 Dwbooster CP Image Store With Slideshow 1.0.16 Dwbooster CP Image Store With Slideshow 1.0.17 Dwbooster CP Image Store With Slideshow 1.0.18 Dwbooster CP Image Store With Slideshow 1.0.19 Dwbooster CP Image Store With Slideshow 1.0.20 Dwbooster CP Image Store With Slideshow 1.0.21 Dwbooster CP Image Store With Slideshow 1.0.22 Dwbooster CP Image Store With Slideshow 1.0.23 Dwbooster CP Image Store With Slideshow 1.0.24 Dwbooster CP Image Store With Slideshow 1.0.25 Dwbooster CP Image Store With Slideshow 1.0.26 Dwbooster CP Image Store With Slideshow 1.0.27 Dwbooster CP Image Store With Slideshow 1.0.28 Dwbooster CP Image Store With Slideshow 1.0.29 Dwbooster CP Image Store With Slideshow 1.0.30 Dwbooster CP Image Store With Slideshow 1.0.31 Dwbooster CP Image Store With Slideshow 1.0.32 Dwbooster CP Image Store With Slideshow 1.0.33 Dwbooster CP Image Store With Slideshow 1.0.34 Dwbooster CP Image Store With Slideshow 1.0.35 Dwbooster CP Image Store With Slideshow 1.0.36 Dwbooster CP Image Store With Slideshow 1.0.37 Dwbooster CP Image Store With Slideshow 1.0.38 Dwbooster CP Image Store With Slideshow 1.0.39 Dwbooster CP Image Store With Slideshow 1.0.40 Dwbooster CP Image Store With Slideshow 1.0.41 Dwbooster CP Image Store With Slideshow 1.0.42 Dwbooster CP Image Store With Slideshow 1.0.43 Dwbooster CP Image Store With Slideshow 1.0.44 Dwbooster CP Image Store With Slideshow 1.0.45 Dwbooster CP Image Store With Slideshow 1.0.46 Dwbooster CP Image Store With Slideshow 1.0.47 Dwbooster CP Image Store With Slideshow 1.0.48 Dwbooster CP Image Store With Slideshow 1.0.49 Dwbooster CP Image Store With Slideshow 1.0.50 Dwbooster CP Image Store With Slideshow 1.0.51 Dwbooster CP Image Store With Slideshow 1.0.52 Dwbooster CP Image Store With Slideshow 1.0.53 Dwbooster CP Image Store With Slideshow 1.0.54 Dwbooster CP Image Store With Slideshow 1.0.55 Dwbooster CP Image Store With Slideshow 1.0.56 Dwbooster CP Image Store With Slideshow 1.0.57 Dwbooster CP Image Store With Slideshow 1.0.58 Dwbooster CP Image Store With Slideshow 1.0.59 Dwbooster CP Image Store With Slideshow 1.0.60 Dwbooster CP Image Store With Slideshow 1.0.61 Dwbooster CP Image Store With Slideshow 1.0.62 Dwbooster CP Image Store With Slideshow 1.0.63 Dwbooster CP Image Store With Slideshow 1.0.64 Dwbooster CP Image Store With Slideshow 1.0.65 Dwbooster CP Image Store With Slideshow 1.0.66 Dwbooster CP Image Store With Slideshow 1.0.67	68

Summary

Vulnerable Configurations

References