{"id":"CVE-2022-0867","aliases":["EUVD-2022-15909","GHSA-4fv4-gh87-p496"],"status":"published","title":"ARPrice Lite \u003c 3.6.1 - Unauthenticated SQLi","description":"The Pricing Table WordPress plugin before 3.6.1 fails to properly sanitize and escape user supplied POST data before it is being interpolated in an SQL statement and then executed via an AJAX action available to unauthenticated users","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.1345,"percentile":0.96458,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-89"],"published":"2022-05-16T14:30:29Z","modified":"2026-06-17T04:21:23Z","exploits":[{"source":"nuclei","id":"CVE-2022-0867","title":"WordPress ARPrice \u003c3.6.1 - SQL Injection","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0867.yaml"}],"products":[{"vendor":"reputeinfosystems","product":"pricing_table"},{"vendor":"unknown","product":"pricing table plugin"}],"references":[{"url":"https://wpscan.com/vulnerability/62803aae-9896-410b-9398-3497a838e494","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0867"},{"url":"https://github.com/advisories/GHSA-4fv4-gh87-p496"}],"sources":{"cve":[{"id":"CVE-2022-0867","title":"ARPrice Lite \u003c 3.6.1 - Unauthenticated SQLi","description":"The Pricing Table WordPress plugin before 3.6.1 fails to properly sanitize and escape user supplied POST data before it is being interpolated in an SQL statement and then executed via an AJAX action available to unauthenticated users","status":"published","published":"2022-05-16T14:30:29Z","modified":"2024-08-02T23:40:04.554Z","cwes":["CWE-89"],"updated_at":"2026-11-02T14:34:41.69911Z"}],"euvd":[{"id":"EUVD-2022-15909","description":"The Pricing Table WordPress plugin before 3.6.1 fails to properly sanitize and escape user supplied POST data before it is being interpolated in an SQL statement and then executed via an AJAX action available to unauthenticated users","status":"published","published":"2022-05-16T14:30:29Z","modified":"2024-08-02T23:40:04Z","updated_at":"2026-11-03T03:26:03.474849Z"}],"ghsa":[{"id":"GHSA-4fv4-gh87-p496","title":"The Pricing Table WordPress plugin before 3.6.1 fails to properly sanitize and escape user...","description":"The Pricing Table WordPress plugin before 3.6.1 fails to properly sanitize and escape user supplied POST data before it is being interpolated in an SQL statement and then executed via an AJAX action available to unauthenticated users","status":"published","published":"2022-05-17T00:01:25Z","modified":"2023-02-03T05:01:12Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:52:56.051434Z"}],"nvd":[{"id":"CVE-2022-0867","description":"The Pricing Table WordPress plugin before 3.6.1 fails to properly sanitize and escape user supplied POST data before it is being interpolated in an SQL statement and then executed via an AJAX action available to unauthenticated users","status":"published","published":"2022-05-16T15:15:08.657Z","modified":"2026-06-17T04:21:23.95Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:07:20.264424Z"}]}}