Medium severity4.9NVD Advisory· Published Jun 8, 2022· Updated Jun 17, 2026

CVE-2022-1691

Description

The Realty Workstation WordPress plugin before 1.0.15 does not sanitise and escape the trans_edit parameter before using it in a SQL statement when an agent edit a transaction, leading to an SQL injection

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Realty Workstationcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <1.0.15
Package: https://wordpress.org/plugins/realty-workstation

Patches

Vulnerability mechanics

References

bulletin.iese.de/post/realty-workstation_1-0-6nvdExploitThird Party Advisory
wpscan.com/vulnerability/f9363b4c-c434-4f15-93f8-46162d2d7049nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.319
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000