CVE-2026-104122: CWE-89 SQL Injection in Ukr-To-Lat
Description
The Ukr-To-Lat WordPress plugin up to version 1.3.5 contains an SQL injection vulnerability. This occurs because the plugin does not properly sanitize and escape a term name before using it in a SQL query. Users with Contributor-level access or higher can exploit this flaw to perform SQL injection attacks.
Affected software
Ukr-To-Lat
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-104122 is an SQL injection vulnerability in the Ukr-To-Lat WordPress plugin versions up to and including 1.3.5. The vulnerability arises from improper sanitization and escaping of a term name before it is used in a SQL query. This flaw allows users with Contributor-level privileges or above to inject malicious SQL code, potentially compromising the database integrity or confidentiality.
Potential Impact
An attacker with Contributor-level access or higher can exploit this vulnerability to perform SQL injection attacks. This could lead to unauthorized data access, modification, or deletion within the WordPress database. The exact impact depends on the database permissions and the attacker's objectives.
Mitigation Recommendations
No patch or official fix information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict Contributor-level access and above to trusted users only to reduce risk.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- WPScan
- Date Reserved
- 2026-10-01T18:21:41.255Z
- State
- PUBLISHED
Threat ID: 6ad3134c2cdf04f656ee8010
Added to database: 10/17/2026, 06:18:52 UTC
Last enriched: 10/17/2026, 06:33:50 UTC
Last updated: 10/17/2026, 19:02:54 UTC
Views: 7
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.