CVE-2026-112860
CVE-2026-112860 · WordPress Participants Database plugin <= 2.7.8.5 - SQL Injection vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in xnau webdesign Participants Database participants-database allows Blind SQL Injection.This issue affects Participants Database: from n/a through 2.7.8.5.
CVSS 9.3 · Critical · EPSS 0.3%
- Published
- Updated
Affected products and versions
participants database
- Versions
- ≥ 0, ≤ 2.7.8.5: Affected (custom)
No fix published