Geo Mashup <= 1.13.17 - SQL Injection

Geo Mashup WordPress plugin = 1.13.17 contains a SQL injection caused by insufficient escaping of the 'sort' parameter, letting unauthenticated attackers extract sensitive database information remotely. id: CVE-2026-2416 info: name: Geo Mashup = 1.13.17 - SQL Injection author: Shivam Kamboj...

CVE-2026-2416

creationtimestamp| type| source ---|---|--- 2026-02-25 09:39:17+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mfof5jvx7o2b 2026-02-25 09:52:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfofujwoqe2n 2026-02-25 10:01:23+00:00| seen|...