CVE-2022-2269: Wpwhitesecurity Website File Changes Monitor

Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days.

The Website File Changes Monitor WordPress plugin before 1.8.3 does not sanitise and escape user input before using it in a SQL statement via an action available to users with the manage_options capability (by default admins), leading to an SQL injection

Affected products

• Wpwhitesecurity Website File Changes Monitor: before 1.8.3 (fixed in 1.8.3)

Published 2022-08-08. Last modified 2026-06-17.