CVE-2026-66630

SQL Injection vulnerability in the WordPress PublishPress Series plugin (versions ≤ 3.1.3 ), discovered by Ananda Dhakal via Patchstack . The flaw requires administrator-level privileges but changes scope, allowing an authenticated admin to inject SQL and achieve high confidentiality impact and l...

CVE-2026-57628

Administrator SQL Injection in WP All Import = 4.0.1 versions...