CVE-2022-1689 is an SQL injection vulnerability in the Note Press WordPress plugin, affecting versions through 0.1.10. An authenticated attacker with administrative privileges can exploit this by manipulating the "Update" parameter without proper sanitization, leading to data modification. The vulnerability has a low CVSS score of 2.7, indicating low severity and impact, with no known public exploits or active exploitation. There is also minimal community discussion or media coverage surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 0.1.10CPE matchmatch criteria | cpe:2.3:a:datainterlock:note_press:*:*:*:*:*:wordpress:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.0 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.