CVE-2022-0760

Deeper analysis

The vulnerability is an unauthenticated SQL injection (CWE-89) affecting the Simple Link Directory WordPress plugin prior to version 7.7.2. The root cause is missing validation and escaping of the post_id parameter when it is incorporated into a SQL statement inside the qcopd_upvote_action AJAX handler, which is reachable by both unauthenticated and authenticated users. The issue received a CVSS 3.1 score of 9.8.

An attacker can send a crafted POST request to the AJAX endpoint with a malicious post_id value, allowing arbitrary SQL commands to be executed against the database. Successful exploitation can result in full confidentiality, integrity, and availability impacts, including data exfiltration, modification, or deletion, without any authentication or user interaction.

The referenced advisories point to the official fix published in changeset 2684915 on the WordPress plugin Trac and to the detailed WPScan entry that confirms the vulnerable code path and the availability of the patched release 7.7.2.

EPSS for this CVE rose sharply after disclosure, reaching a peak of 0.8593 and remaining elevated at 0.7642, indicating sustained exploitation interest that warrants renewed attention from defenders.