CVE-2022-40405: Wowonder

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

WoWonder Social Network Platform v4.1.2 was discovered to contain a SQL injection vulnerability via the offset parameter at requests.php?f=load-my-blogs.

Affected products

• Wowonder Wowonder: version 4.1.2 only

Published 2022-11-15. Last modified 2026-06-17.