CVE-2008-0845: WordPress Dean Logan Wp-People Plugin

High severity, CVSS 7.5. EPSS: 2.8% chance of exploitation in the next 30 days.

SQL injection vulnerability in wp-people-popup.php in Dean Logan WP-People plugin 1.6.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the person parameter.

Affected products

• WordPress Dean Logan Wp-People Plugin: version 1.6.1 only

Published 2008-02-20. Last modified 2026-06-16.