CVE-2026-16080

creationtimestamp| type| source ---|---|--- 2026-08-15 15:16:05+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mt4xp7mns32k 2026-08-15 15:16:13+00:00| seen| https://bsky.app/profile/potato.software/post/3mt4xph5uua24...

CVE-2026-16080

CVE-2026-16080 affects the WordPress plugin “Image Uploader for Welcart” (authenticated scenario). The vulnerability is a generic SQL injection in the attachment field post_title for versions up to 1.4.6, caused by insufficient escaping of user input and lack of proper query preparation. Impact d...