AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2022-1014

CRITICAL · CVSS 9.8 EPSS 1.60%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-05-23 · Last synced 2026-08-04

CyberRota Analysis

This is a critical severity vulnerability with a CVSS score of 9.8. It affects WordPress. It involves a SQL injection risk.

CVE
CVE-2022-1014
Severity
CRITICAL
CVSS
9.8
EPSS
1.60%
WordPress

Original NVD Description

The WP Contacts Manager WordPress plugin through 2.2.4 fails to properly sanitize user supplied POST data before it is being interpolated in an SQL statement and then executed, leading to an SQL injection vulnerability.