Threats tagged 'ghsa-2c9h-p9wv-wmqh'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.3	EPSS 0.3%	CVE-2026-18666Library Management System (WordPress plugin) · SQL Injection Medium4.3EPSS 0.3%2026-08-10CVE Database V5CVE-2026-18666 The Library Management System WordPress plugin before 3.6.7 does not sanitize and escape a user-supplied parameter before using it in a SQL statement, allowing users with a role as low as Subscriber to perform SQL injection and extract arbitrary data from the database, including user password hashes. EPSS 0.3%Vulnerability CWE-89 #ghsa-2c9h-p9wv-wmqh	CVE Database V5	2026-08-10

Page 1 of 1