Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2024-11-21
CVE-2022-1685 - Five Minute Webshop Plugin
The Five Minute Webshop WordPress plugin through 1.3.2 does not properly validate and sanitise the orderby parameter before using it in a SQL statement via the Manage Products admin page, leading to an SQL Injection
PLUGIN
Five Minute Webshop
CVE-2022-1685
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2022-1686 - Five Minute Webshop Plugin
The Five Minute Webshop WordPress plugin through 1.3.2 does not sanitise and escape the id parameter before using it in a SQL statement when editing a product via the admin dashboard, leading to an SQL Injection
PLUGIN
Five Minute Webshop
CVE-2022-1686
Risk Score