CVE-2022-0739

The BookingPress WordPress plugin before 1.0.11 fails to properly sanitize user supplied POST data before it is used in a dynamically constructed SQL query via the bookingpress_front_get_category_services AJAX action (available to unauthenticated users), leading to an unauthenticated SQL Injection

• CWE-89

• https://plugins.trac.wordpress.org/changeset/2684789Patch, Third Party Advisory
• https://wpscan.com/vulnerability/388cd42d-b61a-42a4-8604-99b812db2357Exploit, Third Party Advisory
• https://plugins.trac.wordpress.org/changeset/2684789Patch, Third Party Advisory
• https://wpscan.com/vulnerability/388cd42d-b61a-42a4-8604-99b812db2357Exploit, Third Party Advisory

Published

Mar 21, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-0732The backend infrastructure shared by multiple mobile device …7.5
• CVE-2022-0734A cross-site scripting vulnerability was identified in the C…6.1
• CVE-2022-0735An issue has been discovered in GitLab CE/EE affecting all v…9.8
• CVE-2022-0736Insecure Temporary File in GitHub repository mlflow/mlflow p…7.5
• CVE-2022-0737The Text Hover WordPress plugin before 4.2 does not sanitize…4.8
• CVE-2022-0738An issue has been discovered in GitLab affecting all version…7.5
• CVE-2022-0740Incorrect authorization in the Asana integration's branch re…4.3
• CVE-2022-0741Improper input validation in all versions of GitLab CE/EE us…7.5
• CVE-2022-0742Memory leak in icmp6 implementation in Linux Kernel 5.13+ al…7.5
• CVE-2022-0743Cross-site Scripting (XSS) - Stored in GitHub repository get…4.6
• CVE-2022-0745The Like Button Rating WordPress plugin before 2.6.45 allows…6.5
• CVE-2022-0746Business Logic Errors in GitHub repository dolibarr/dolibarr…4.3