CVE

CVE-2022-0827

9.8

CVSS

Description

The Bestbooks WordPress plugin through 2.6.3 does not sanitise and escape some parameters before using them in a SQL statement via an AJAX action, leading to an SQL Injection exploitable by unauthenticated users

Attack Vector

Privileges Req.

User Interaction

bestbooks

Updated Sep 26, 2026View on NVD →

S4E scanner

criticalProduct Based Web Vulnerabilities~10 seconds

CVE-2022-0827 Scanner

Detect SQLi in WordPress Best Books plugin (CVE-2022-0827) with 9.8 CVSS.

Used 3.3k times · 3.3k assets checked · domain, ipv4, subdomain

Scanner page →Run scanner

CVE history: bestbooks

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →