Skip to content

CVE PROGRAM SOURCE RECORD9.9 Critical

CVE-2022-44588

WordPress Cryptocurrency Widgets Pack Plugin <=1.8.1 is vulnerable to SQL Injection

Read JSON ↗CVE.org ↗

Status: Published
Published: 2022-12-15
Updated: 2026-04-28
Assigning organization: Patchstack

Description

Unauth. SQL Injection vulnerability in Cryptocurrency Widgets Pack Plugin <=1.8.1 on WordPress.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Blocksera Cryptocurrency Widgets Pack

Default version status: unaffected

n/a to ≤ 1.8.1affected

References

https://patchstack.com/database/vulnerability/cryptocurrency-widgets-pack/wordpress-cryptocurrency-widgets-pack-plugin-1-8-1-sql-injection-sqli-vulnerability?_s_id=cve ↗