Dictionary vulnerabilities
We track 2 vulnerabilities in Dictionary products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 17, 2026.
2vulnerabilities
0critical
2high
0exploited
8.0average CVSS score
Latest Dictionary vulnerabilities
- 8.8 High severity
Dictionary: Improper Neutralization of Input During Web Page Generation
The Dictionary WordPress plugin through 1.0 does not have authorisation, sanitisation or escaping in place when adding or updating dictionary entries, allowing unauthenticated users to store arbitrary web scripts which will execute when a user views an affecte
- 7.1 High severity
Dictionary: Improper Neutralization of Input During Web Page Generation
The Dictionary WordPress plugin through 1.0 does not escape user input before reflecting it back in the responses of several directly accessible scripts, allowing unauthenticated attackers to perform Reflected Cross-Site Scripting attacks against anyone they c