CVE-2022-3768

The WPSmartContracts WordPress plugin before 1.3.12 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as author

• CWE-89

• https://bulletin.iese.de/post/wp-smart-contracts_1-3-11/Exploit, Third Party Advisory
• https://wpscan.com/vulnerability/1d8bf5bb-5a17-49b7-a5ba-5f2866e1f8a3Exploit, Third Party Advisory
• https://bulletin.iese.de/post/wp-smart-contracts_1-3-11/Exploit, Third Party Advisory
• https://wpscan.com/vulnerability/1d8bf5bb-5a17-49b7-a5ba-5f2866e1f8a3Exploit, Third Party Advisory

Published

Nov 28, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-3765Cross-site Scripting (XSS) - Stored in GitHub repository tho…5.4
• CVE-2022-3766Cross-site Scripting (XSS) - Reflected in GitHub repository …6.1
• CVE-2022-37660In hostapd 2.10 and earlier, the PKEX code remains active ev…6.5
• CVE-2022-37661SmartRG SR506n 2.5.15 and SR510n 2.6.13 routers are vulnerab…9.8
• CVE-2022-3767Missing validation in DAST analyzer affecting all versions f…6.5
• CVE-2022-37679Miniblog.Core v1.0 was discovered to contain a cross-site sc…4.8
• CVE-2022-37680An improper authentication for critical function issue in Hi…7.5
• CVE-2022-37681Hitachi Kokusai Electric Newtork products for monitoring sys…7.5
• CVE-2022-3769The OWM Weather WordPress plugin before 5.6.9 does not prope…8.8
• CVE-2022-3770A vulnerability classified as critical was found in Yunjing …8.8
• CVE-2022-37700Zentao Demo15 is vulnerable to Directory Traversal. The impa…7.5
• CVE-2022-37703In Amanda 3.5.1, an information leak vulnerability was found…3.3