Wp User Merger Project Wp User Merger — known CVE vulnerabilities

Every CVE whose affected-product data names Wp User Merger Project Wp User Merger, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2022-3848 — CVSS 8.8 (high): The WP User Merger WordPress plugin before 1.5.3 does not properly sanitise and escape a parameter before using it in a SQL statement…
• CVE-2022-3849 — CVSS 8.8 (high): The WP User Merger WordPress plugin before 1.5.3 does not properly sanitise and escape a parameter before using it in a SQL statement…
• CVE-2022-3865 — CVSS 8.8 (high): The WP User Merger WordPress plugin before 1.5.3 does not properly sanitise and escape a parameter before using it in a SQL statement…