Unrated severityNVD Advisory· Published Sep 19, 2022· Updated Aug 3, 2024

Ketchup Restaurant Reservations <= 1.0.0 - Unauthenticated Blind SQLi

CVE-2022-2754

Description

The Ketchup Restaurant Reservations WordPress plugin through 1.0.0 does not validate and escape some reservation parameters before using them in SQL statements, which could allow unauthenticated attackers to perform SQL Injection attacks

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Restaurant Reservationscpe-rescue
Package: https://wordpress.org/plugins/restaurant-reservations
WordPress/Ketchup Restaurant Reservationsllm-fuzzy
Range: <=1.0.0

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/e3c6d137-ff6e-432a-a21a-b36dc81f73c5mitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.030
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000