Threats tagged 'ghsa-5xcj-g8cf-7fjj'

1 threat

Threats tagged 'ghsa-5xcj-g8cf-7fjj'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.8	EPSS 0.2%	CVE-2026-89237Bluff Post · SQL Injection Medium6.8EPSS 0.2%2026-09-26CVE Database V5CVE-2026-89237 CVE-2026-89237 is a SQL Injection vulnerability in the Bluff Post WordPress plugin up to version 1.1.1. The plugin fails to properly sanitize and escape parameters used as SQL identifiers, allowing unauthenticated attackers to append malicious SQL code and extract sensitive database information. The vulnerability has a medium severity with a CVSS score of 6.8. EPSS 0.2%Vulnerability #cwe-89 #ghsa-5xcj-g8cf-7fjj	CVE Database V5	2026-09-26

Showing 1–1 of 1 result