title: Personal Dictionary < 1.3.4 - Unauthenticated SQLi
description: The Personal Dictionary WordPress plugin before 1.3.4 fails to properly sanitize user supplied POST data before it is being interpolated in an SQL statement and then executed, leading to a blind SQL injection vulnerability.
problem types: CWE-89 SQL Injection
affected:
{
product: Personal Dictionary
vendor: Unknown
versions:
lessThan: 1.3.4, status: affected, version: 1.3.4, versionType: custom
}