What’s Vulnerable › Vulnerabilities

CVE-2022-0773: Documentor <= 1.5.3 - Unauthenticated SQLi

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 43.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-05-02 · updated 2026-06-17
• Weakness: CWE-89

Description

The Documentor WordPress plugin through 1.5.3 fails to sanitize and escape user input before it is being interpolated in an SQL statement and then executed, leading to an SQL Injection exploitable by unauthenticated users.

Affected products

• Documentor – Create Product Documentation: through 1.5.3

References

• https://wpscan.com/vulnerability/55b89de0-30ed-4f98-935e-51f069faf6fc
• https://wpscan.com/vulnerability/55b89de0-30ed-4f98-935e-51f069faf6fc

Get alerted when CVE-2022-0773 or the next vulnerability affects your stack