CVE-2022-3246

CVE-2022-3246 is a high-severity SQL injection vulnerability affecting the Blog2Social: Social Media Auto Post & Scheduler WordPress plugin prior to version 6.9.10. The flaw stems from improper sanitization of a parameter, allowing any authenticated user, including subscribers, to inject malicious SQL queries. With a CVSS score of 8.8 (High), this vulnerability can be exploited remotely with low complexity, potentially leading to full compromise of confidentiality, integrity, and availability of the affected system. The EPSS score is low, indicating a low probability of exploitation. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting a lack of widespread attention.