CVE-2022-0788 – WP Fundraising Donation and Crowdfunding Platform < 1.5.0 - Unauthenticated SQLi

https://notcve.org/view.php?id=CVE-2022-0788

The WP Fundraising Donation and Crowdfunding Platform WordPress plugin before 1.5.0 does not sanitise and escape a parameter before using it in a SQL statement via one of it's REST route, leading to an SQL injection exploitable by unauthenticated users El plugin WP Fundraising Donation and Crowdfunding Platform WordPress anterior a la versión 1.5.0 no sanea y escapa de un parámetro antes de utilizarlo en una sentencia SQL a través de una de sus rutas REST, lo que lleva a una inyección SQL explotable por usuarios no autentificados The WP Fundraising Donation and Crowdfunding Platform WordPress plugin through 1.4.2 does not sanitise and escape a parameter before using it in a SQL statement via one of it's REST route, leading to an SQL injection exploitable by unauthenticated users • https://wpscan.com/vulnerability/fbc71710-123f-4c61-9796-a6a4fd354828 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •