Skip to content

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories

Loading categories

CVE-2022-0739 — BookingPress < 1.0.11 - Unauthenticated SQL Injection | Kitploit

GitHub/elganz0/cve-2022-0739

Vulnerability Analysis Exploitation Web Application Exploitation Information Gathering Penetration Testing

elganz0/cve-2022-0739

CVE-2022-0739

BookingPress < 1.0.11 - Unauthenticated SQL Injection

View Repository

3 years ago

Most Popular

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →

Share

CVE-2022-0739

BookingPress < 1.0.11 - Unauthenticated SQL Injection

The plugin fails to properly sanitize user supplied POST data before it is used in a dynamically constructed SQL query via the bookingpress_front_get_category_services AJAX action (available to unauthenticated users), leading to an unauthenticated SQL Injection

CVE-2022-0739

https://plugins.trac.wordpress.org/changeset/2684789

Sources:

https://wpscan.com/vulnerability/388cd42d-b61a-42a4-8604-99b812db2357

https://github.com/rapid7/metasploit-framework/blob/d48319a867a75cae501cc6797114b511ba0293a4/modules/auxiliary/gather/wp_bookingpress_category_services_sqli.rb

https://github.com/destr4ct/CVE-2022-0739/blob/main/booking-press-expl.py