vulnerability

WordPress Plugin: podcast-importer-secondline: CVE-2022-1023: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:S/C:P/I:P/A:P)

Published

Mar 21, 2022

Added

May 15, 2025

Modified

Apr 30, 2026

Description

The Podcast Importer SecondLine WordPress plugin before 1.3.8 does not sanitise and properly escape some imported data, which could allow SQL injection attacks to be performed by imported a malicious podcast file.

Solution

podcast-importer-secondline-plugin-cve-2022-1023

References

https://www.cve.org/CVERecord?id=CVE-2022-1023
https://www.wordfence.com/threat-intel/vulnerabilities/id/2b0f887c-b9e5-4d3c-b354-ebf5741dc3ba?source=api-prod
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-24373
CVE-2022-1023
https://attackerkb.com/topics/CVE-2022-1023
CWE-89
EUVD-EUVD-2022-24373

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report