{"vulnerability": "CVE-2022-21661", "sightings": [{"uuid": "5f872928-5d4e-42c3-9c5f-e37a894f785c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21661", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/2832", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-21661 exp for Elementor custom skin. \nURL\uff1ahttps://github.com/XmasSnowISBACK/CVE-2022-21661\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-08-02T18:54:57.000000Z"}, {"uuid": "9e234d5d-fc5b-4e6f-a94a-38173f8d2c09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21661", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/2305", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aWordpress 5.8.2  CVE-2022-21661 Vuln enviroment POC exploit\nURL\uff1ahttps://github.com/0x4E0x650x6F/Wordpress-cve-CVE-2022-21661\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-05-28T10:54:16.000000Z"}, {"uuid": "06d143a2-a988-4f10-acb8-9b3262045c08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21661", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/2817", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-21661 exp for Elementor custom skin.\nURL\uff1ahttps://github.com/QWERTYisme/CVE-2022-21661\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-07-31T11:56:40.000000Z"}, {"uuid": "788a7e6d-33de-4af9-a6ce-ae2e094b2537", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21661", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/3187", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aThe first poc video presenting the sql injection test from (  WordPress Core 5.8.2-'WP_Query'  / CVE-2022-21661) \nURL\uff1ahttps://github.com/APTIRAN/CVE-2022-21661\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2025-03-07T12:29:59.000000Z"}, {"uuid": "6f46211b-79ca-4779-ab79-f2262e3ca6e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21661", "type": "seen", "source": "https://t.me/arpsyndicate/1829", "content": "#ExploitObserverAlert\n\nCVE-2022-21661\n\nDESCRIPTION: Exploit Observer has 40 entries related to CVE-2022-21661. WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. Due to improper sanitization in WP_Query, there can be cases where SQL injection is possible through plugins or themes that use it in a certain way. This has been patched in WordPress version 5.8.3. Older affected versions are also fixed via security release, that go back till 3.7.37. We strongly recommend that you keep auto-updates enabled. There are no known workarounds for this vulnerability.\n\nFIRST-EPSS: 0.937320000\nNVD-IS: 3.6\nNVD-ES: 3.9", "creation_timestamp": "2023-12-16T14:41:24.000000Z"}, {"uuid": "8bf7fc24-adeb-48e9-94b9-35bebcf5e97b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21661", "type": "seen", "source": "Telegram/hlaj8pCWo0xhq_29wgWzUqXa3H_JtYFZaxWsf_gjRvhLsWU", "content": "", "creation_timestamp": "2024-10-11T15:03:57.000000Z"}, {"uuid": "48f262fd-0c08-4831-a3dc-d0cf164fc932", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21661", "type": "seen", "source": "Telegram/SmcoBxthnKwgHljRQ5eGvJQRSp7XCqQ6GoUv_bF594oADDQ", "content": "", "creation_timestamp": "2024-10-11T14:27:12.000000Z"}, {"uuid": "856870e8-a8bf-4970-8325-f99782a073d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21661", "type": "published-proof-of-concept", "source": "https://t.me/breachdetector/153961", "content": "{\n  \"Source\": \"https://t.me/documentors\",\n  \"Content\": \"CVE-2022-21661-main.zip 20.0 MB WordPress Core 5.8.2-'WP_Query' / CVE-2022-21661 https://github.com/APTIRAN/CVE-2022-21661 \ud83d\udcc4For Questions and Purchase and place Orders Contact us: \ud83d\udece @darkamo https://t.me/documentors\", \n  \"author\": \"\u2693\ufe0f\ud835\udd07\ud835\udd2c\ud835\udd20\ud835\udd32\ud835\udd2a\ud835\udd22\ud835\udd2b\ud835\udd31\ud835\udd2c\ud835\udd2f\",\n  \"Detection Date\": \"02 Dec 2022\",\n  \"Type\": \"Data leak\"\n}\n\ud83d\udd39 Data Leak monitoring system\ud83d\udd39", "creation_timestamp": "2022-12-02T08:57:29.000000Z"}, {"uuid": "43927510-a09a-4369-9e60-c1ecfe86b519", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21661", "type": "published-proof-of-concept", "source": "https://t.me/breachdetector/152930", "content": "{\n  \"Source\": \"https://t.me/documentors\",\n  \"Content\": \"CVE-2022-21661-main.zip 20.0 MB WordPress Core 5.8.2-'WP_Query' / CVE-2022-21661 https://github.com/APTIRAN/CVE-2022-21661 \ud83d\udcc4For Questions and Purchase and place Orders Contact us: \ud83d\udece @darkamo https://t.me/documentors\", \n  \"author\": \"\u2693\ufe0f\ud835\udd07\ud835\udd2c\ud835\udd20\ud835\udd32\ud835\udd2a\ud835\udd22\ud835\udd2b\ud835\udd31\ud835\udd2c\ud835\udd2f\",\n  \"Detection Date\": \"30 Nov 2022\",\n  \"Type\": \"Data leak\"\n}\n\ud83d\udd39 Data Leak monitoring system\ud83d\udd39", "creation_timestamp": "2022-11-30T17:51:32.000000Z"}, {"uuid": "3838ce88-3a2a-4cbb-b8fa-03539703466a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21661", "type": "published-proof-of-concept", "source": "Telegram/aS6mAmeUhsFL57NL24yCmfK1ybyUebrYuHG32QrjsHtQ-as", "content": "", "creation_timestamp": "2022-12-26T00:02:53.000000Z"}, {"uuid": "6d390a4b-d253-4af3-87e2-b5207c5d0569", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21661", "type": "published-proof-of-concept", "source": "Telegram/zMR22lMSxfSx92UKdkl2Oy7iHmx2McRy0HK2tJZWvPLAmko", "content": "", "creation_timestamp": "2022-12-25T16:18:05.000000Z"}, {"uuid": "796e3d20-52a0-48d1-9dd9-0e475b44bc4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21661", "type": "published-proof-of-concept", "source": "https://t.me/MrVGunz/584", "content": "CVE-2022-21661 : WordPress Core 5.8.2 - 'WP_Query' SQL Injection\nAuthor: ARYAN CHEHREGHANI\nPOC : https://www.exploit-db.com/exploits/50663", "creation_timestamp": "2022-11-15T09:30:09.000000Z"}, {"uuid": "5ce7fbaa-0da7-4b30-a36f-feb44f1d08a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21661", "type": "published-proof-of-concept", "source": "https://t.me/crackcodes/1575", "content": "WordPress Core 5.8.2-'WP_Query' / CVE-2022-21661\n\nhttps://github.com/APTIRAN/CVE-2022-21661", "creation_timestamp": "2023-11-16T19:51:57.000000Z"}, {"uuid": "855a1694-3311-491b-a08a-95a270f08819", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21661", "type": "published-proof-of-concept", "source": "https://t.me/professional_c_h/1857", "content": "WordPress Core 5.8.2-'WP_Query' / CVE-2022-21661\n\nhttps://github.com/APTIRAN/CVE-2022-21661\n\nChannel: \n@Professional_c_h\n@Card_crack_hack", "creation_timestamp": "2022-12-02T11:04:16.000000Z"}, {"uuid": "1b275834-a319-4882-8bcc-82c9b76b1bf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21661", "type": "published-proof-of-concept", "source": "https://t.me/intelexch/31608", "content": "https://github.com/APTIRAN/CVE-2022-21661", "creation_timestamp": "2022-11-08T15:27:29.000000Z"}, {"uuid": "9cc9955b-ab0a-45f5-a289-31c6941254c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21661", "type": "published-proof-of-concept", "source": "https://t.me/jokerplstaeen/15955", "content": "\u200f\u0645\u0648\u0636\u0648\u0639 \u062c\u062f\u064a\u062f.\n\n\u0634\u0631\u062d \u0645\u0641\u0635\u0651\u0644 \u0644\u0625\u0643\u062a\u0634\u0627\u0641 \u0648\u0625\u0633\u062a\u063a\u0644\u0627\u0644 \nSQL Injection in the core of Wordpress (CVE-2022-21661)\n\n\u0628\u0627\u0644\u0639\u0631\u0628\u064a \u0648\u0627\u0644\u0640 English.\n\n\u0642\u0631\u0627\u0621\u0629 \u0645\u0645\u062a\u0639\u0629\u2665\ufe0f\ud83d\ude4f\ud83c\udffb\n\nhttps://confidentialteam.github.io/posts/cve-202221661ar/", "creation_timestamp": "2023-04-18T17:51:29.000000Z"}, {"uuid": "dd0a32f5-d7c9-4a80-b8d9-718718604e04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21661", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/283", "content": "https://github.com/purple-WL/wordpress-CVE-2022-21661\n#github", "creation_timestamp": "2022-09-28T01:44:13.000000Z"}, {"uuid": "dd100d7e-c9fb-4c45-80e3-d19caff05290", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21661", "type": "seen", "source": "https://t.me/cibsecurity/35089", "content": "\u203c CVE-2022-21661 \u203c\n\nWordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. Due to improper sanitization in WP_Query, there can be cases where SQL injection is possible through plugins or themes that use it in a certain way. This has been patched in WordPress version 5.8.3. Older affected versions are also fixed via security release, that go back till 3.7.37. We strongly recommend that you keep auto-updates enabled. There are no known workarounds for this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-01-07T02:16:24.000000Z"}, {"uuid": "4d8de260-4347-40bf-86d9-5500cc1468f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21661", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/12495", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#sql_injection\nName: *CVE-2022-21661-Demo*\nGithub: https://github.com/daniel616/CVE-2022-21661-Demo", "creation_timestamp": "2026-07-31T00:00:06.339175Z"}, {"uuid": "a27855a9-e521-4bf6-b659-15ea9a6f7906", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21661", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/14297", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#sql_injection\nName: *CVE-2022-21661-WordPress-Core-5.8.2-WP_Query-SQL-Injection*\nGithub: https://github.com/TAPESH-TEAM/CVE-2022-21661-WordPress-Core-5.8.2-WP_Query-SQL-Injection", "creation_timestamp": "2026-07-31T00:00:26.446325Z"}, {"uuid": "6a5bb14f-1d22-45ac-8404-6f05d9b73920", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21661", "type": "published-proof-of-concept", "source": "Telegram/q8rexRbZbr7I46zhe_gO9OWmaFaCzrMM5IMiFN0qpnYIqw", "content": "", "creation_timestamp": "2022-11-30T21:50:54.000000Z"}, {"uuid": "734c9c21-1c87-49f3-a1ac-9e78bb17b55e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21661", "type": "published-proof-of-concept", "source": "https://t.me/BlueRedTeam/2441", "content": "#CVE-2022\n\nThe first poc video presenting the sql injection test from (\u00a0 WordPress Core 5.8.2-'WP_Query'\u00a0 / CVE-2022-21661) \n\nhttps://github.com/APTIRAN/CVE-2022-21661\n\n@BlueRedTeam", "creation_timestamp": "2022-11-20T16:59:42.000000Z"}, {"uuid": "d8d617cd-3181-4822-9864-71c5debbf8a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21661", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/361", "content": "WordPress Core 5.8.2-'WP_Query' / CVE-2022-21661\n\nhttps://github.com/APTIRAN/CVE-2022-21661", "creation_timestamp": "2022-11-30T15:05:22.000000Z"}, {"uuid": "55449044-2f12-40be-8682-d20779cde9a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21661", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/11659", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-21661-PoC*\nGithub: https://github.com/sealldeveloper/CVE-2022-21661-PoC", "creation_timestamp": "2026-07-31T03:00:04.287471Z"}, {"uuid": "28a4606f-9b28-4f26-9a1d-7418dc8f5668", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21661", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/5174", "content": "#exploit\n1. CVE-2022-21661:\nSQL Injection in Wordpress core\nhttps://unsafe.sh/go-99941.html\n\n2. CVE-2021-26294:\nDirectory Traversal in Afterlogic webmail aurora and pro\nhttps://github.com/dorkerdevil/CVE-2021-26294", "creation_timestamp": "2022-01-11T11:05:12.000000Z"}, {"uuid": "9cf7ec74-c86f-4b48-90ba-33e725580012", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21661", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/5236", "content": "#Threat_Research\n1. The OAuth Misconfiguration\nhttps://infosecwriteups.com/the-oauth-misconfiguration-15e66dd19a6e\n2. CVE-2022-21661: \nExposing Database Info via WordPress SQL Injection\nhttps://www.zerodayinitiative.com/blog/2022/1/18/cve-2021-21661-exposing-database-info-via-wordpress-sql-injection\n]-> https://github.com/APTIRAN/CVE-2022-21661", "creation_timestamp": "2022-12-05T04:44:42.000000Z"}, {"uuid": "9e20c89f-3c77-40d3-b47a-a1f4dbc76b2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21661", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9729", "content": "#Blue_Team_Techniques\n1. Hunting M365 Invaders:\nBlue Team's Guide to Initial Access Vectors\nhttps://www.splunk.com/en_us/blog/security/hunting-m365-invaders-blue-team-s-guide-to-initial-access-vectors.html\n2. Script to validate WordPress CVE-2022-21661\nhttps://github.com/p4ncontomat3/CVE-2022-21661", "creation_timestamp": "2024-01-08T02:57:46.000000Z"}, {"uuid": "6da9222f-657e-494b-90ed-ea2ede818b67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21661", "type": "published-proof-of-concept", "source": "https://t.me/LearnExploit/4360", "content": "CVE-2022-21661\n\nWordPress Core 5.8.2 - 'WP_Query' SQL Injection. \n\nGithub\n\n#CVE #POC\n\u2014\u2014\u2014\u2014\u2014\u2014\n0Day.Today\n@LearnExploit\n@Tech_Army", "creation_timestamp": "2023-01-04T10:02:38.000000Z"}, {"uuid": "a1bcd26d-9dc6-4683-b626-bedfbd8cf076", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21661", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/10187", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#sql_injection\nName: *SSI-CVE-2022-21661*\nGithub: https://github.com/WellingtonEspindula/SSI-CVE-2022-21661", "creation_timestamp": "2026-07-31T08:00:04.695676Z"}, {"uuid": "dddd4169-d25f-476c-8078-60dbe535b254", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21661", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/394", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-21661\nGithub: https://github.com/z92g/CVE-2022-21661\nDescribe: \nWordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. Due to improper sanitization in WP_Query, there can be cases where SQL injection is possible through plugins or themes that use it in a certain way. This has been patched in WordPress version 5.8.3. Older affected versions are also fixed via security release, that go back till 3.7.37. We strongly recommend that you keep auto-updates enabled. There are no known workarounds for this vulnerability.", "creation_timestamp": "2026-08-02T00:01:12.666313Z"}, {"uuid": "704e53ce-a6fe-4b20-9434-808b2d89bce9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21661", "type": "seen", "source": "Telegram/pQB4kDvOmUO0-FOWPosgcezK6szsfsV4tQ7NQqEDCAFgSWg", "content": "", "creation_timestamp": "2026-08-29T23:00:05.298900Z"}, {"uuid": "98d4eb82-ada9-4ec1-a9c4-4d68085fea3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21661", "type": "published-proof-of-concept", "source": "Telegram/pQB4kDvOmUO0-FOWPosgcezK6szsfsV4tQ7NQqEDCAFgSWg", "content": "", "creation_timestamp": "2026-08-30T00:00:07.922180Z"}, {"uuid": "80579c56-7d2a-4a0e-a249-ec5b5657cb01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21661", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/10187", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#sql_injection\nName: *SSI-CVE-2022-21661*\nGithub: https://github.com/WellingtonEspindula/SSI-CVE-2022-21661", "creation_timestamp": "2026-08-01T00:00:38.073789Z"}, {"uuid": "156aa305-2d73-41dd-9efd-3a17891cd1fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21661", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/11659", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-21661-PoC*\nGithub: https://github.com/sealldeveloper/CVE-2022-21661-PoC", "creation_timestamp": "2026-08-01T00:00:43.892854Z"}, {"uuid": "79975909-b57d-4ca3-92bd-c632840d7b1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21661", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/394", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-21661\nGithub: https://github.com/z92g/CVE-2022-21661\nDescribe: \nWordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. Due to improper sanitization in WP_Query, there can be cases where SQL injection is possible through plugins or themes that use it in a certain way. This has been patched in WordPress version 5.8.3. Older affected versions are also fixed via security release, that go back till 3.7.37. We strongly recommend that you keep auto-updates enabled. There are no known workarounds for this vulnerability.", "creation_timestamp": "2026-08-01T08:00:05.149380Z"}, {"uuid": "35602488-b358-4777-b20c-55ff0ac23528", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21661", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9e670936-015e-40d9-8daa-09fbc557bd5c", "content": "", "creation_timestamp": "2026-06-23T14:06:17.493928Z"}, {"uuid": "8e397b79-925a-4ef0-b6c2-6b12e58aada3", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2022-21661", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d4289b4e-2307-4c31-8d3f-4ef57eb6effc", "content": "", "creation_timestamp": "2026-06-30T10:00:37.640379Z"}, {"uuid": "995f187e-a531-4b77-bf96-1fb09d598862", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21661", "type": "seen", "source": "https://t.me/CVEhub/11659", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-21661-PoC*\nGithub: https://github.com/sealldeveloper/CVE-2022-21661-PoC", "creation_timestamp": "2026-07-29T12:00:35.452098Z"}, {"uuid": "1411b500-f3f0-499a-8397-a666ab45610c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21661", "type": "seen", "source": "https://t.me/CVEhub/12495", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#sql_injection\nName: *CVE-2022-21661-Demo*\nGithub: https://github.com/daniel616/CVE-2022-21661-Demo", "creation_timestamp": "2026-07-29T12:00:33.146588Z"}, {"uuid": "a88c4383-9ae8-4c4c-bea7-ff77178c34de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21661", "type": "seen", "source": "https://t.me/CVEhub/14297", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#sql_injection\nName: *CVE-2022-21661-WordPress-Core-5.8.2-WP_Query-SQL-Injection*\nGithub: https://github.com/TAPESH-TEAM/CVE-2022-21661-WordPress-Core-5.8.2-WP_Query-SQL-Injection", "creation_timestamp": "2026-07-29T12:00:26.477899Z"}, {"uuid": "70df932a-a1a6-4b83-8a84-bcb97f0fb0f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21661", "type": "seen", "source": "https://t.me/CVEhub/10187", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#sql_injection\nName: *SSI-CVE-2022-21661*\nGithub: https://github.com/WellingtonEspindula/SSI-CVE-2022-21661", "creation_timestamp": "2026-07-29T12:00:40.367540Z"}, {"uuid": "d05d1f2a-6079-4c5f-90cb-3ff6a23f0d37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21661", "type": "seen", "source": "https://t.me/CVEhub/394", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-21661\nGithub: https://github.com/z92g/CVE-2022-21661\nDescribe: \nWordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. Due to improper sanitization in WP_Query, there can be cases where SQL injection is possible through plugins or themes that use it in a certain way. This has been patched in WordPress version 5.8.3. Older affected versions are also fixed via security release, that go back till 3.7.37. We strongly recommend that you keep auto-updates enabled. There are no known workarounds for this vulnerability.", "creation_timestamp": "2026-07-29T12:01:06.326077Z"}, {"uuid": "7f1a0934-5781-42b5-a34d-acdfe70c4ba7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21661", "type": "seen", "source": "https://t.me/reverseame/2028", "content": "CVE-2022-21661: Exposing Database Info via WordPress SQL Injection https://www.zerodayinitiative.com/blog/2022/1/18/cve-2021-21661-exposing-database-info-via-wordpress-sql-injection", "creation_timestamp": "2026-07-29T12:02:46.443618Z"}, {"uuid": "96a6e675-3236-427d-9eac-9d45dd0734d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21661", "type": "seen", "source": "https://t.me/CVEhub/14297", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#sql_injection\nName: *CVE-2022-21661-WordPress-Core-5.8.2-WP_Query-SQL-Injection*\nGithub: https://github.com/TAPESH-TEAM/CVE-2022-21661-WordPress-Core-5.8.2-WP_Query-SQL-Injection", "creation_timestamp": "2026-07-30T00:00:48.942578Z"}, {"uuid": "37548da7-833b-4b4f-9001-f0aa6a89344e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21661", "type": "seen", "source": "https://t.me/CVEhub/12495", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#sql_injection\nName: *CVE-2022-21661-Demo*\nGithub: https://github.com/daniel616/CVE-2022-21661-Demo", "creation_timestamp": "2026-07-30T00:00:57.797707Z"}, {"uuid": "26f4fae2-71c4-457a-9afa-574121be3664", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21661", "type": "seen", "source": "https://t.me/CVEhub/11659", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-21661-PoC*\nGithub: https://github.com/sealldeveloper/CVE-2022-21661-PoC", "creation_timestamp": "2026-07-30T00:01:01.899923Z"}, {"uuid": "7f2b66b1-4f32-4032-87b9-da62fe47ed47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21661", "type": "seen", "source": "https://t.me/CVEhub/10187", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#sql_injection\nName: *SSI-CVE-2022-21661*\nGithub: https://github.com/WellingtonEspindula/SSI-CVE-2022-21661", "creation_timestamp": "2026-07-30T00:01:09.743281Z"}, {"uuid": "87b24ef5-c11d-447f-902e-9c6ad74d7de1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21661", "type": "seen", "source": "https://t.me/CVEhub/394", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-21661\nGithub: https://github.com/z92g/CVE-2022-21661\nDescribe: \nWordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. Due to improper sanitization in WP_Query, there can be cases where SQL injection is possible through plugins or themes that use it in a certain way. This has been patched in WordPress version 5.8.3. Older affected versions are also fixed via security release, that go back till 3.7.37. We strongly recommend that you keep auto-updates enabled. There are no known workarounds for this vulnerability.", "creation_timestamp": "2026-07-30T00:01:46.829218Z"}, {"uuid": "7f664211-b110-40f3-91dd-0b20271b8f2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21661", "type": "seen", "source": "https://t.me/reverseame/2028", "content": "CVE-2022-21661: Exposing Database Info via WordPress SQL Injection https://www.zerodayinitiative.com/blog/2022/1/18/cve-2021-21661-exposing-database-info-via-wordpress-sql-injection", "creation_timestamp": "2026-07-30T00:02:39.914657Z"}, {"uuid": "30aeae33-9de1-44e2-a99d-a1e25422a235", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21661", "type": "seen", "source": "https://t.me/hacking_Attack/38530", "content": "Exploit Collector\nWordPress Core 5.8.2 SQL Injection\n\nhttps://3.bp.blogspot.com/-cErR-NKa5pU/WWlvUH06dSI/AAAAAAAAINw/w0uVuk51vEgh40coJSJAKFsc2nT9tBwYgCLcBGAs/s1600/h44.png \nWordPress Core version 5.8.2 suffers from a remote SQL injection vulnerability.\n\nMD5 | d7d5f48971d62eb48cd036c99568cc99\n\nDownload\n# Exploit Title: WordPress Core 5.8.2 - 'WP_Query' SQL Injection\n# Date: 11/01/2022\n# Exploit Author: Aryan Chehreghani\n# Vendor Homepage: https://wordpress.org\n# Software Link: https://wordpress.org/download/releases\n# Version: < 5.8.3\n# Tested on: Windows 10\n# CVE : CVE-2022-21661\n\n# [ VULNERABILITY DETAILS ] : \n\n#This vulnerability allows remote attackers to disclose sensitive information on affected installations of WordPress Core,\n#Authentication is not required to exploit this vulnerability, The specific flaw exists within the WP_Query class,\n#The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries,\n#An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise.\n\n# [ References ] : \n\nhttps://wordpress.org/news/category/releases\nhttps://www.zerodayinitiative.com/advisories/ZDI-22-020\nhttps://hackerone.com/reports/1378209\n\n# [ Sample Request ] :\n\nPOST /wp-admin/admin-ajax.php HTTP/1.1\nHost: localhost\nUpgrade-Insecure_Requests: 1\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:95.0) Gecko/20100101 Firefox/95.0\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.99\nSec-Fetch-Dest: document\nSec-Fetch-Mode: navigate\nSec-Fetch-Site: cross-site\nSec-Fetch-User: ?1\nCache-Control: max-age=0\nConnection: close \nContent-Type: application/x-www-form-urlencoded\n\naction=\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:59.568043Z"}, {"uuid": "6549385b-007e-4aa2-8acb-5f9196a35b4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21661", "type": "seen", "source": "https://t.me/hacking_Attack/38530", "content": "Exploit Collector\nWordPress Core 5.8.2 SQL Injection\n\nhttps://3.bp.blogspot.com/-cErR-NKa5pU/WWlvUH06dSI/AAAAAAAAINw/w0uVuk51vEgh40coJSJAKFsc2nT9tBwYgCLcBGAs/s1600/h44.png \nWordPress Core version 5.8.2 suffers from a remote SQL injection vulnerability.\n\nMD5 | d7d5f48971d62eb48cd036c99568cc99\n\nDownload\n# Exploit Title: WordPress Core 5.8.2 - 'WP_Query' SQL Injection\n# Date: 11/01/2022\n# Exploit Author: Aryan Chehreghani\n# Vendor Homepage: https://wordpress.org\n# Software Link: https://wordpress.org/download/releases\n# Version: < 5.8.3\n# Tested on: Windows 10\n# CVE : CVE-2022-21661\n\n# [ VULNERABILITY DETAILS ] : \n\n#This vulnerability allows remote attackers to disclose sensitive information on affected installations of WordPress Core,\n#Authentication is not required to exploit this vulnerability, The specific flaw exists within the WP_Query class,\n#The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries,\n#An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise.\n\n# [ References ] : \n\nhttps://wordpress.org/news/category/releases\nhttps://www.zerodayinitiative.com/advisories/ZDI-22-020\nhttps://hackerone.com/reports/1378209\n\n# [ Sample Request ] :\n\nPOST /wp-admin/admin-ajax.php HTTP/1.1\nHost: localhost\nUpgrade-Insecure_Requests: 1\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:95.0) Gecko/20100101 Firefox/95.0\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.99\nSec-Fetch-Dest: document\nSec-Fetch-Mode: navigate\nSec-Fetch-Site: cross-site\nSec-Fetch-User: ?1\nCache-Control: max-age=0\nConnection: close \nContent-Type: application/x-www-form-urlencoded\n\naction=\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:22.006010Z"}, {"uuid": "9758a3c7-9a3b-402e-84a4-1e09713b91d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21661", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/38530", "content": "Exploit Collector\nWordPress Core 5.8.2 SQL Injection\n\nhttps://3.bp.blogspot.com/-cErR-NKa5pU/WWlvUH06dSI/AAAAAAAAINw/w0uVuk51vEgh40coJSJAKFsc2nT9tBwYgCLcBGAs/s1600/h44.png \nWordPress Core version 5.8.2 suffers from a remote SQL injection vulnerability.\n\nMD5 | d7d5f48971d62eb48cd036c99568cc99\n\nDownload\n# Exploit Title: WordPress Core 5.8.2 - 'WP_Query' SQL Injection\n# Date: 11/01/2022\n# Exploit Author: Aryan Chehreghani\n# Vendor Homepage: https://wordpress.org\n# Software Link: https://wordpress.org/download/releases\n# Version: < 5.8.3\n# Tested on: Windows 10\n# CVE : CVE-2022-21661\n\n# [ VULNERABILITY DETAILS ] : \n\n#This vulnerability allows remote attackers to disclose sensitive information on affected installations of WordPress Core,\n#Authentication is not required to exploit this vulnerability, The specific flaw exists within the WP_Query class,\n#The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries,\n#An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise.\n\n# [ References ] : \n\nhttps://wordpress.org/news/category/releases\nhttps://www.zerodayinitiative.com/advisories/ZDI-22-020\nhttps://hackerone.com/reports/1378209\n\n# [ Sample Request ] :\n\nPOST /wp-admin/admin-ajax.php HTTP/1.1\nHost: localhost\nUpgrade-Insecure_Requests: 1\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:95.0) Gecko/20100101 Firefox/95.0\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.99\nSec-Fetch-Dest: document\nSec-Fetch-Mode: navigate\nSec-Fetch-Site: cross-site\nSec-Fetch-User: ?1\nCache-Control: max-age=0\nConnection: close \nContent-Type: application/x-www-form-urlencoded\n\naction=\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T13:00:05.094575Z"}, {"uuid": "e25cf60b-a189-4363-9fc1-94ec7776faac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21661", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/38530", "content": "Exploit Collector\nWordPress Core 5.8.2 SQL Injection\n\nhttps://3.bp.blogspot.com/-cErR-NKa5pU/WWlvUH06dSI/AAAAAAAAINw/w0uVuk51vEgh40coJSJAKFsc2nT9tBwYgCLcBGAs/s1600/h44.png \nWordPress Core version 5.8.2 suffers from a remote SQL injection vulnerability.\n\nMD5 | d7d5f48971d62eb48cd036c99568cc99\n\nDownload\n# Exploit Title: WordPress Core 5.8.2 - 'WP_Query' SQL Injection\n# Date: 11/01/2022\n# Exploit Author: Aryan Chehreghani\n# Vendor Homepage: https://wordpress.org\n# Software Link: https://wordpress.org/download/releases\n# Version: < 5.8.3\n# Tested on: Windows 10\n# CVE : CVE-2022-21661\n\n# [ VULNERABILITY DETAILS ] : \n\n#This vulnerability allows remote attackers to disclose sensitive information on affected installations of WordPress Core,\n#Authentication is not required to exploit this vulnerability, The specific flaw exists within the WP_Query class,\n#The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries,\n#An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise.\n\n# [ References ] : \n\nhttps://wordpress.org/news/category/releases\nhttps://www.zerodayinitiative.com/advisories/ZDI-22-020\nhttps://hackerone.com/reports/1378209\n\n# [ Sample Request ] :\n\nPOST /wp-admin/admin-ajax.php HTTP/1.1\nHost: localhost\nUpgrade-Insecure_Requests: 1\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:95.0) Gecko/20100101 Firefox/95.0\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.99\nSec-Fetch-Dest: document\nSec-Fetch-Mode: navigate\nSec-Fetch-Site: cross-site\nSec-Fetch-User: ?1\nCache-Control: max-age=0\nConnection: close \nContent-Type: application/x-www-form-urlencoded\n\naction=\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-07T01:00:14.266413Z"}]}