CVE-2022-3241: Rahamsolutions Build App Online

Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days.

The Build App Online WordPress plugin before 1.0.19 does not properly sanitise and escape some parameters before using them in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection

Affected products

• Rahamsolutions Build App Online: before 1.0.19 (fixed in 1.0.19)

Published 2023-01-02. Last modified 2026-06-17.