{"vulnerability": "CVE-2022-4059", "sightings": [{"uuid": "8ec98043-edec-44ef-a461-5abbdb02ffae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-4059", "type": "seen", "source": "https://t.me/arpsyndicate/1709", "content": "#ExploitObserverAlert\n\nCVE-2022-4059\n\nDESCRIPTION: Exploit Observer has 2 entries related to CVE-2022-4059. The Cryptocurrency Widgets Pack WordPress plugin before 2.0 does not sanitise and escape some parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.\n\nFIRST-EPSS: 0.013640000\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2023-12-11T06:25:45.000000Z"}, {"uuid": "82f30de1-bc3d-4aad-9d52-4bc92e1983db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-4059", "type": "seen", "source": "https://t.me/cibsecurity/55780", "content": "\u203c CVE-2022-4059 \u203c\n\nThe Cryptocurrency Widgets Pack WordPress plugin through 1.8.1 does not sanitise and escape some parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-03T00:29:58.000000Z"}, {"uuid": "d89ed386-cc2f-4ad5-a846-ba265b778b7b", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-4059", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/f8685c83-0de7-4b31-b0d8-9715cc2a94a6", "content": "", "creation_timestamp": "2026-06-19T12:42:04.469404Z"}, {"uuid": "b90f3ff0-db03-4fde-ab1f-9b8bbf9e0194", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-4059", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/0b1130b7-b10a-4d31-aac7-594f67a11862", "content": "", "creation_timestamp": "2026-07-01T05:54:44.535722Z"}]}