CVE-2022-0887: Cybernetikz Easy Social Icons

High severity, CVSS 7.2. EPSS: 1.3% chance of exploitation in the next 30 days.

The Easy Social Icons WordPress plugin before 3.1.4 does not sanitize the selected_icons attribute to the cnss_widget before using it in an SQL statement, leading to a SQL injection vulnerability.

Affected products

• Cybernetikz Easy Social Icons: before 3.1.4 (fixed in 3.1.4)

Published 2022-04-04. Last modified 2026-06-17.