CVE-2022-2593: Deliciousbrains Better Search Replace

High severity, CVSS 7.2. EPSS: 1.3% chance of exploitation in the next 30 days.

The Better Search Replace WordPress plugin before 1.4.1 does not properly sanitise and escape table data before inserting it into a SQL query, which could allow high privilege users to perform SQL Injection attacks

Affected products

• Deliciousbrains Better Search Replace: before 1.4.1 (fixed in 1.4.1)

Published 2022-08-22. Last modified 2026-06-17.