Read the docs

Documentor Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Documentor Project records in CISA KEV

No Documentor Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Documentor 1 record HIGH

Records

1 record in Documentor · all components

TI-2022-00683 CVE-2022-0773 · GHSA-6pm3-53cv-rpmg

Documentor <= 1.5.3 - Unauthenticated SQLi

Priority HIGH 71

The Documentor WordPress plugin through 1.5.3 fails to sanitize and escape user input before it is being interpolated in an SQL statement and then executed, leading to an SQL Injection exploitable by unauthenticated user…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.43259 Published 2022-05-02 No fix listed CWE-89
Open these records in search →