Lucene search
+L

14 matches found

NVD
NVD
•added 2026/10/11 7:17 a.m.•18 views

CVE-2026-89302

The Post Voting System WordPress plugin through 1.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks...

8.6CVSS0.00262EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/11 6:00 a.m.•10 views

EUVD-2026-96790

The Post Voting System WordPress plugin through 1.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks...

8.6CVSS5.8AI score0.00262EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/11 6:00 a.m.•19 views

CVE-2026-89302

The Post Voting System WordPress plugin (versions up to and including 1.0 ) is vulnerable to SQL injection because it fails to properly sanitize and escape a parameter before including it in a SQL query. This flaw allows unauthenticated users to perform SQL injection attacks, specifically via the...

8.6CVSS5.9AI score0.00262EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/11 6:00 a.m.•41 views

CVE-2026-89302 Post Voting System <= 1.0 - Unauthenticated SQLi via 'id' Parameter

The Post Voting System WordPress plugin through 1.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks...

0.00262EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/10/11 12:00 a.m.•13 views

PT-2026-110063

Name of the Vulnerable Software and Affected Versions Post Voting System versions prior to 1.1 Description An issue exists where the software fails to properly sanitize and escape the id parameter before incorporating it into a SQL query. This allows unauthenticated users to execute SQL injection...

8.6CVSS6.2AI score0.00262EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/11 12:00 a.m.•7 views

CVE-2026-89302: Improper Neutralization of Special Elements used in an SQL Command

The Post Voting System WordPress plugin through 1.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks...

8.6CVSS5.9AI score0.00262EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2026/09/28 11:50 a.m.•21 views

WordPress Post Voting System plugin <= 1.0 - Subscriber+ SQLi vulnerability

Subscriber+ SQLi vulnerability discovered by Erwan LR WPScan in WordPress Plugin Post Voting System versions = 1.0...

6.4CVSS5.8AI score0.00148EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2026/09/28 7:17 a.m.•13 views

CVE-2026-89303

The Post Voting System WordPress plugin through 1.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing any authenticated user to perform SQL injection attacks...

6.4CVSS0.00148EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/28 6:00 a.m.•36 views

CVE-2026-89303 Post Voting System <= 1.0 - Subscriber+ SQLi via 'row' Parameter

The Post Voting System WordPress plugin through 1.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing any authenticated user to perform SQL injection attacks...

0.00148EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/28 6:00 a.m.•14 views

CVE-2026-89303 Post Voting System <= 1.0 - Subscriber+ SQLi via 'row' Parameter

The Post Voting System WordPress plugin through 1.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing any authenticated user to perform SQL injection attacks...

5.9AI score0.00148EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/28 6:00 a.m.•22 views

CVE-2026-89303

The Post Voting System WordPress plugin (versions

6.4CVSS5.9AI score0.00148EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/28 6:00 a.m.•14 views

EUVD-2026-88094

The Post Voting System WordPress plugin through 1.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing any authenticated user to perform SQL injection attacks...

6.4CVSS5.9AI score0.00148EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/09/28 12:00 a.m.•10 views

PT-2026-99777

Name of the Vulnerable Software and Affected Versions Post Voting System WordPress plugin version 1.0 Description An issue exists where the software fails to properly sanitize and escape a parameter before incorporating it into a SQL query. This allows authenticated users to execute SQL injection...

6.4CVSS6.2AI score0.00148EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/28 12:00 a.m.•10 views

CVE-2026-89303: Improper Neutralization of Special Elements used in an SQL Command

The Post Voting System WordPress plugin through 1.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing any authenticated user to perform SQL injection attacks...

6.4CVSS5.9AI score0.00148EPSS
SaveExploits0References2
Rows per page
Query Builder