Threats tagged 'ghsa-q4j7-5cq8-7g9h'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.1	EPSS 0.3%	CVE-2026-14238vitepos (WordPress plugin) · SQL Injection Medium4.1EPSS 0.3%2026-08-10CVE Database V5CVE-2026-14238 The vitepos WordPress plugin before 3.6.0 does not sanitize or parameterize an identifier taken from a REST request body before using it in a database query in one of its report endpoints, allowing users with administrator-level access to perform SQL injection. EPSS 0.3%Vulnerability CWE-89 #ghsa-q4j7-5cq8-7g9h	CVE Database V5	2026-08-10

Page 1 of 1