CVE-2022-1013 Personal Dictionary < 1.3.4 - Unauthenticated SQLi

2022-05-0916:50:43

CWE-89

WPScan

www.cve.org

0.016 Low

EPSS

Percentile

87.5%

JSON

The Personal Dictionary WordPress plugin before 1.3.4 fails to properly sanitize user supplied POST data before it is being interpolated in an SQL statement and then executed, leading to a blind SQL injection vulnerability.

CNA Affected

[
  {
    "product": "Personal Dictionary",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "1.3.4",
        "status": "affected",
        "version": "1.3.4",
        "versionType": "custom"
      }
    ]
  }
]

References

wpscan.com/vulnerability/eed70659-9e3e-42a2-b427-56c52e0fbc0d

0.016 Low

EPSS

Percentile

87.5%

JSON

Related for CVELIST:CVE-2022-1013