plugin

Wp Contacts Manager Vulnerabilities

1 known security issue reported for the Wp Contacts Manager WordPress plugin. Most recent disclosed May 2, 2022.

1 critical

Running Wp Contacts Manager on your site? Check whether your installed version is affected.

WP Contacts Manager <= 2.2.4 - Unauthenticated SQL Injection

critical

The WP Contacts Manager WordPress plugin through 2.2.4 fails to properly sanitize user supplied POST data before it is being interpolated in an SQL statement and then executed, leading to an SQL injection vulnerability.

CVSS:: 9.8
Affected:: up to 2.2.4
Fix:: No patched version reported
Disclosed:: May 2, 2022

CVE-2022-1014 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database