Security Advisory
CVE-2022-0785
9.8
CRITICAL
Vulnerability Description
The Daily Prayer Time WordPress plugin before 2022.03.01 does not sanitise and escape the month parameter before using it in a SQL statement via the get_monthly_timetable AJAX action (available to unauthenticated users), leading to an unauthenticated SQL injection
Published Date
April 18, 2022
Official Source
NIST NVD Advisory