High severity7.2NVD Advisory· Published Aug 22, 2022· Updated Jun 17, 2026

CVE-2022-2593

Description

The Better Search Replace WordPress plugin before 1.4.1 does not properly sanitise and escape table data before inserting it into a SQL query, which could allow high privilege users to perform SQL Injection attacks

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Deliciousbrains/Better Search Replace
cpe:2.3:a:deliciousbrains:better_search_replace:*:*:*:*:*:wordpress:*:*
Range: <1.4.1
WordPress/Better Search Replacellm-fuzzy
Range: <1.4.1
Wpengine/Better Search Replacev5
Range: 1.4.1

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/229a065e-1062-44d4-818d-29aa3b6b6d41nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.468
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000