Threats tagged 'ghsa-jjw2-9c4x-8mhg'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.3	EPSS 0.4%	CVE-2026-66447WordPress File Upload · SQL Injection Critical9.3EPSS 0.4%2026-08-06CVE Database V5CVE-2026-66447 CVE-2026-66447 is a critical unauthenticated SQL Injection vulnerability affecting the nickboss WordPress File Upload plugin versions up to and including 5.1.7. This flaw allows remote attackers to inject SQL commands without authentication, potentially leading to high confidentiality impact and limited availability impact. No official patch or remediation guidance has been provided yet. EPSS 0.4%Vulnerability nickboss CWE-89 #ghsa-jjw2-9c4x-8mhg	CVE Database V5	2026-08-06

Page 1 of 1