CVE-2022-1014

PoC —

CVSS 3.1

9.8 critical

EPSS

2%p74

Published

May 23, 2022 (May 23, 2022)

Modified

Jun 17, 2026

Description

The WP Contacts Manager WordPress plugin through 2.2.4 fails to properly sanitize user supplied POST data before it is being interpolated in an SQL statement and then executed, leading to an SQL injection vulnerability.

Vendors: labarta
Products: wp contacts manager
Ecosystems: WordPress
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.6%)

In the news0 stories

No ingested article mentions this CVE yet.