CVE-2022-1013 — Personal Dictionary < 1.3.4 - Unauthenticated SQLi

Back Back to CVE browser

CRITICAL

Personal Dictionary < 1.3.4 - Unauthenticated SQLi

Published May 9, 2022

9.8

CRITICAL

CVSS 3.1

EPSS 7.49%

Description

The Personal Dictionary WordPress plugin before 1.3.4 fails to properly sanitize user supplied POST data before it is being interpolated in an SQL statement and then executed, leading to a blind SQL injection vulnerability.

Affected products

Vendor n/a Product Personal Dictionary Default
n/a
- Version
  1.3.4
  Status
  affected
  Constraints
  <1.3.4

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Personal Dictionary

n/a

Version	Status	Constraints
1.3.4	affected	<1.3.4

Remediation

No remediation recorded yet.

Metrics

7.49% 0.07488

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 3, 2026.

EPSS probability 0.07488

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (38 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 3, 2026	7.49% (0.07488)	94.31th	v5 (v2026.06.15)
Jul 20, 2026	7.78% (0.07775)	93.99th	v5 (v2026.06.15)
Jun 15, 2026	6.63% (0.06629)	92.98th	v5 (v2026.06.15)
Mar 11, 2026	66.21% (0.66207)	98.49th	v4 (v2025.03.14)
Nov 21, 2025	83.08% (0.83084)	99.21th	v4 (v2025.03.14)
Nov 18, 2025	56.60% (0.56599)	98.04th	v4 (v2025.03.14)
Nov 7, 2025	83.08% (0.83084)	99.21th	v4 (v2025.03.14)
Sep 9, 2025	72.19% (0.72189)	98.70th	v4 (v2025.03.14)
Jun 15, 2025	56.15% (0.56153)	97.94th	v4 (v2025.03.14)
May 18, 2025	62.10% (0.62099)	98.22th	v4 (v2025.03.14)
May 10, 2025	64.93% (0.64932)	98.34th	v4 (v2025.03.14)
Mar 30, 2025	70.46% (0.70463)	98.58th	v4 (v2025.03.14)
Mar 29, 2025	88.60% (0.88602)	99.40th	v4 (v2025.03.14)
Mar 24, 2025	70.46% (0.70463)	98.61th	v4 (v2025.03.14)
Mar 23, 2025	73.54% (0.73540)	98.71th	v4 (v2025.03.14)
Mar 18, 2025	79.59% (0.79588)	99.06th	v4 (v2025.03.14)
Mar 17, 2025	78.26% (0.78259)	98.97th	v4 (v2025.03.14)
Dec 17, 2024	3.71% (0.03714)	91.66th	v3 (v2023.03.01)
Dec 12, 2024	1.75% (0.01748)	88.44th	v3 (v2023.03.01)
May 5, 2024	1.61% (0.01610)	87.36th	v3 (v2023.03.01)
Apr 7, 2024	2.27% (0.02266)	89.40th	v3 (v2023.03.01)
Feb 11, 2024	2.03% (0.02031)	88.55th	v3 (v2023.03.01)
Jan 27, 2024	2.85% (0.02852)	89.71th	v3 (v2023.03.01)
Dec 29, 2023	2.04% (0.02036)	87.73th	v3 (v2023.03.01)
Nov 30, 2023	1.19% (0.01192)	83.52th	v3 (v2023.03.01)
Nov 17, 2023	1.26% (0.01261)	84.09th	v3 (v2023.03.01)
Nov 2, 2023	1.03% (0.01029)	82.21th	v3 (v2023.03.01)
Oct 20, 2023	0.94% (0.00942)	81.36th	v3 (v2023.03.01)
Aug 1, 2023	1.14% (0.01144)	82.86th	v3 (v2023.03.01)
Jun 23, 2023	1.02% (0.01018)	81.66th	v3 (v2023.03.01)
Jun 11, 2023	1.12% (0.01119)	82.55th	v3 (v2023.03.01)
May 16, 2023	0.97% (0.00974)	81.15th	v3 (v2023.03.01)
Apr 9, 2023	0.88% (0.00876)	80.05th	v3 (v2023.03.01)
Mar 29, 2023	0.78% (0.00784)	78.79th	v3 (v2023.03.01)
Mar 7, 2023	0.85% (0.00853)	79.67th	v3 (v2023.03.01)
Mar 6, 2023	0.89% (0.00885)	27.89th	v2 (v2022.01.01)
Oct 22, 2022	0.89% (0.00885)	26.71th	v2 (v2022.01.01)
May 10, 2022	0.89% (0.00885)	24.69th	v2 (v2022.01.01)

Weaknesses (1)

CWE-89

SQL Injection

References (1)

https://wpscan.com/vulnerability/eed70659-9e3e-42a2-b427-56c52e0fbc0d
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://wpscan.com/vulnerability/eed70659-9e3e-42a2-b427-56c52e0fbc0d		x_refsource_MISCExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner WPScan

Published May 9, 2022

Updated Aug 2, 2024

Reserved Mar 17, 2022

Link CVE-2022-1013

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-1013

Red Hat

Severity n/a

Public date n/a

Links CVE-2022-1013