WordPress Plugin Vulnerabilities

JetFormBuilder Stripe Gateway < 1.1.0 - Unauthenticated Blind SQLi via Payment Token

Description

The plugin does not sanitise and escape a payment token before using it in a SQL statement, allowing unauthenticated users to extract arbitrary data from the database, including password hashes.

Proof of Concept

Affects Plugins

Plugin icon
jet-form-builder-stripe-gateway
Fixed in 1.1.0

References

CVE
CVE-2022-4997

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89
CVSS
8.6 (high)

Miscellaneous

Original Researcher
Jakub Herman
Submitter
Jakub Herman
Submitter website
https://jakubherman.net
Verified
Yes
WPVDB ID
368c38af-66c3-4500-ad50-87ada3abecd1

Timeline

Publicly Published
2026-09-21 (about 2 days ago)
Added
2026-09-21 (about 1 day ago)
Last Updated
2026-09-21 (about 1 day ago)

Other

Published
Title
Published
2023-10-30
Title
Vertical marquee plugin < 7.2 - Authenticated (Subscriber+) SQL Injection via Shortcode
Published
2025-07-11
Title
Modern Events Calendar Lite < 6.4.0 - Unauthenticated SQL Injection
Published
2026-06-10
Title
Taskbuilder – Project Management & Task Management Tool With Kanban Board < 5.0.8 - Authenticated (Subscriber+) SQL Injection
Published
2026-07-01
Title
Houzez Property Feed < 2.5.47 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter
Published
2020-04-01
Title
LearnDash < 3.1.6 - Unauthenticated SQL Injection