CVE-2022-1013

CVE-2022-1013: Personal Dictionary < 1.3.4 - Unauthenticated SQLi

Vendor Unknown
Product Personal Dictionary
Weakness CWE-89 · SQLi
Published May 9, 2022
Last update August 2, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Personal Dictionary WordPress plugin before 1.3.4 fails to properly sanitize user supplied POST data before it is being interpolated in an SQL statement and then executed, leading to a blind SQL injection vulnerability.

Key dates

02Disclosure timeline

May 9, 2022 CVE published
August 2, 2024 Record updated