CVE-2022-1013

The Personal Dictionary WordPress plugin before 1.3.4 fails to properly sanitize user supplied POST data before it is being interpolated in an SQL statement and then executed, leading to a blind SQL injection vulnerability.

Score

CVSS 3.1 9.8 Critical

Status

Modified - contact@wpscan.com

Published

2022-05-09

Last modified

2024-08-02

Weaknesses

CWE-89

Affected products

• Personal Dictionary (Ays-pro)
• Personal Dictionary (Unknown)

References

• https://wpscan.com/vulnerability/eed70659-9e3e-42a2-b427-56c52e0fbc0d