CVE-2026-8163

The CVE concerns the Infility Global WordPress plugin (before version 2.15.19). The root cause is insufficient sanitization/escaping of certain parameters in SQL statements, allowing SQL Injection. The vulnerability is exploitable by authenticated users with Subscriber-level access and above. The...