CVE-2026-5651

The Askeet plugin for WordPress is vulnerable to SQL Injection via the 'sqlquery' parameter in multiple AJAX actions askeetexecutesqlquery, askeetexportallresults in all versions up to, and including, 3.0. This is due to the askeetissafequery filter being bypassable using MySQL conditional commen...

CVE-2026-5651

The CVE-2026-5651 entry concerns the WordPress plugin Askeet (versions up to 3.0). Affected component: the plugin’s AJAX actions (askeet_execute_sql_query, askeet_export_all_results) that take the sql_query parameter. Root cause: the askeet_is_safe_query() filter is bypassable via MySQL condition...

CVE-2026-5651 Askeet <= 3.0 - Authenticated (Administrator+) SQL Injection via 'sql_query' Parameter

The Askeet plugin for WordPress is vulnerable to SQL Injection via the 'sqlquery' parameter in multiple AJAX actions askeetexecutesqlquery, askeetexportallresults in all versions up to, and including, 3.0. This is due to the askeetissafequery filter being bypassable using MySQL conditional commen...