Critical severity9.8NVD Advisory· Published Sep 19, 2022· Updated Jun 17, 2026

CVE-2022-2754

Description

The Ketchup Restaurant Reservations WordPress plugin through 1.0.0 does not validate and escape some reservation parameters before using them in SQL statements, which could allow unauthenticated attackers to perform SQL Injection attacks

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Ketchup Restaurant Reservationsllm-fuzzy
Range: <=1.0.0
WordPress/Restaurant Reservationscpe-rescue
Package: https://wordpress.org/plugins/restaurant-reservations
Ketchup Restaurant Reservations Project/Ketchup Restaurant Reservations
cpe:2.3:a:ketchup_restaurant_reservations_project:ketchup_restaurant_reservations:*:*:*:*:*:wordpress:*:*
Range: <=1.0.0

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/e3c6d137-ff6e-432a-a21a-b36dc81f73c5nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.030
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000