CVE-2022-0773

The Documentor WordPress plugin through 1.5.3 fails to sanitize and escape user input before it is being interpolated in an SQL statement and then executed, leading to an SQL Injection exploitable by unauthenticated users.

Score

CVSS 3.1 9.8 Critical

Status

Modified - contact@wpscan.com

Published

2022-05-02

Last modified

2024-08-02

Weaknesses

CWE-89

Affected products

• Documentor (Documentor Project)
• Documentor Create Product Documentation (Unknown)

References

• https://wpscan.com/vulnerability/55b89de0-30ed-4f98-935e-51f069faf6fc