CVE-2022-1685

The Five Minute Webshop WordPress plugin through 1.3.2 does not properly validate and sanitise the orderby parameter before using it in a SQL statement via the Manage Products admin page, leading to an SQL Injection

• CWE-89

• https://bulletin.iese.de/post/five-minute-webshop_1-3-2_1Exploit, Third Party Advisory
• https://wpscan.com/vulnerability/86bd28d5-6767-4bca-ab59-710c1c4ecd97Exploit, Third Party Advisory
• https://bulletin.iese.de/post/five-minute-webshop_1-3-2_1Exploit, Third Party Advisory
• https://wpscan.com/vulnerability/86bd28d5-6767-4bca-ab59-710c1c4ecd97Exploit, Third Party Advisory

Published

Jun 8, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-1679A use-after-free flaw was found in the Linux kernel’s Athero…7.8
• CVE-2022-1680An account takeover issue has been discovered in GitLab EE a…8.8
• CVE-2022-1681Authentication Bypass Using an Alternate Path or Channel in …7.2
• CVE-2022-1682Reflected Xss using url based payload in GitHub repository n…6.1
• CVE-2022-1683The amtyThumb WordPress plugin through 4.2.0 does not saniti…8.8
• CVE-2022-1684The Cube Slider WordPress plugin through 1.2 does not saniti…2.7
• CVE-2022-1686The Five Minute Webshop WordPress plugin through 1.3.2 does …2.7
• CVE-2022-1687The Logo Slider WordPress plugin through 1.4.8 does not sani…2.7
• CVE-2022-1688The Note Press WordPress plugin through 0.1.10 does not sani…2.7
• CVE-2022-1689The Note Press WordPress plugin through 0.1.10 does not sani…2.7
• CVE-2022-1690The Note Press WordPress plugin through 0.1.10 does not sani…2.7
• CVE-2022-1691The Realty Workstation WordPress plugin before 1.0.15 does n…4.9