Threats tagged 'ghsa-r2j7-7525-ff3c'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.5	CVE-2026-93904The Social Web Suite – Social Media Auto Post, Social Media Auto Publish plugin for WordPress is vulnerable to generic High7.52026-10-29GCVE DatabaseCVE-2026-93904 The Social Web Suite WordPress plugin (up to version 4.1.12) contains a generic SQL Injection vulnerability via the 'exclude_posts' parameter. This flaw allows unauthenticated attackers to append arbitrary SQL queries to extract sensitive database information. The vulnerability is exacerbated by a bypassable HMAC authentication mechanism on fresh installations where the secret key is not yet generated. Report on CVE-2026-93904 Vulnerability CWE-89 #ghsa-r2j7-7525-ff3c	GCVE Database	2026-10-29

Page 1 of 1