CVE-2026-13596

The CVE pertains to the WordPress plugin Participants Database, affected version prior to 2.7.8.4. The issue is improper sanitization/escaping of a user-supplied parameter used in an SQL query, enabling unauthenticated SQL injection. Impact is unauthenticated data access or manipulation via the v...