Threats tagged 'ghsa-93fh-f4mp-7f58'

1 threat

Threats tagged 'ghsa-93fh-f4mp-7f58'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.8	EPSS 0.2%	CVE-2026-91074BSK PDF Manager · SQL Injection Medium6.8EPSS 0.2%2026-10-17CVE Database V5CVE-2026-91074 CVE-2026-91074 is a SQL injection vulnerability in the BSK PDF Manager WordPress plugin versions up to 3.8.1. The plugin fails to properly sanitize and escape a parameter used in a SQL query, allowing authenticated users with contributor-level access or higher to perform SQL injection attacks. This could lead to unauthorized reading of sensitive data, including administrator password hashes. EPSS 0.2%Vulnerability #cwe-89 #ghsa-93fh-f4mp-7f58	CVE Database V5	2026-10-17

Showing 1–1 of 1 result