{"vulnerability": "cve-2022-1505", "sightings": [{"uuid": "53a5a3c6-418e-4602-b819-a1429975cdd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1505", "type": "seen", "source": "https://t.me/cibsecurity/42289", "content": "\u203c CVE-2022-1505 \u203c\n\nThe RSVPMaker plugin for WordPress is vulnerable to unauthenticated SQL Injection due to missing SQL escaping and parameterization on user supplied data passed to a SQL query in the rsvpmaker-api-endpoints.php file. This makes it possible for unauthenticated attackers to steal sensitive information from the database in versions up to and including 9.2.6.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-11T00:33:20.000000Z"}]}