← Database

CVE-2022-1013

CRITICAL CVSS: 9.8 Published: 2022-05-09 Modified: 2026-06-17

Description

The Personal Dictionary WordPress plugin before 1.3.4 fails to properly sanitize user supplied POST data before it is being interpolated in an SQL statement and then executed, leading to a blind SQL injection vulnerability.

Affected Platforms

Ays-Pro Personal Dictionary

Weakness Type

CWE-89

References