CVE-2022-42984: Wowonder

Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days.

WoWonder Social Network Platform 4.1.4 was discovered to contain a SQL injection vulnerability via the offset parameter at requests.php?f=search&s=recipients.

Affected products

• Wowonder Wowonder: version 4.1.4 only

Published 2022-11-15. Last modified 2026-06-17.