CVE-2022-1014 | BDVDB-2026-176643 Detail

WP Contacts Manager

Description#

The WP Contacts Manager WordPress plugin through 2.2.4 fails to properly sanitize user supplied POST data before it is being interpolated in an SQL statement and then executed, leading to an SQL injection vulnerability.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

References#

https://wpscan.com/vulnerability/eb9e202d-04aa-4343-86a2-4aa2edaa7f6b

Exploit#

No public exploit known

History#

Version 12022-05-23Record published in the CVE List.
Version 22024-08-02Most recent update recorded in the CVE List.