Known vulnerabilities in WP User Merger

Vendor: Fahad Mahmood
Software: WP User Merger
Software CPE: cpe:2.3:a:fahadmahmood:wp-user-merger:*:*:*:*:*:wordpress:*:*
Website: https://profiles.wordpress.org/fahadmahmood/
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting WP User Merger WP User Merger is affected by 3 known vulnerabilities: 3 medium Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU69686 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-3865		 CWE-89 Medium
No
No
 1.5.3 29.11.2022 SB2022112920
#VU69685 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-3848		 CWE-89 Medium
No
No
 1.5.3 29.11.2022 SB2022112920
#VU69684 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-3849		 CWE-89 Medium
No
No
 1.5.3 29.11.2022 SB2022112920