CVE-2022-0773

Name of the Vulnerable Software and Affected Versions Documentor WordPress plugin versions 1.5.3 and earlier

Description The issue arises from the failure to sanitize and escape user input before it is interpolated in an SQL statement and then executed, leading to an SQL Injection that can be exploited by unauthenticated users.

Recommendations For Documentor WordPress plugin versions 1.5.3 and earlier, update to a version that addresses this issue, as the current version is exploitable to SQL Injection attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.