WordPress security by component

IWS

Plugin description

IWS is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Dec 26, 2022; the highest CVE/CNA score is 9.8.

Plugin slug: iws-geo-form-fields

Latest vulnerability

CVE-2022-4117: IWS: SQL injection

IWS is affected by SQL injection. The vulnerable path is reachable without authentication. A successful request can alter database queries and expose or modify WordPress data.

PublishedDec 26, 2022

Safe version guidanceSee mitigation notes

		Safe version
Dec 26, 2022	CVE-2022-4117 IWS: SQL injection IWS is affected by SQL injection. The vulnerable path is reachable without authentication. A successful request can alter database queries and expose or modify WordPress data.	See mitigation notes	CVE9.8 NVD9.8