The Personal Dictionary WordPress plugin before 1.3.4 fails to properly sanitize user supplied POST data before it is being interpolated in an SQL statement and then executed, leading to a blind SQL injection vulnerability.
CPE | Name | Operator | Version |
---|---|---|---|
personal_dictionary | lt | 1.3.4 |