14 matches found
CVE-2026-89302
The Post Voting System WordPress plugin through 1.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks...
EUVD-2026-96790
The Post Voting System WordPress plugin through 1.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks...
CVE-2026-89302
The Post Voting System WordPress plugin (versions up to and including 1.0 ) is vulnerable to SQL injection because it fails to properly sanitize and escape a parameter before including it in a SQL query. This flaw allows unauthenticated users to perform SQL injection attacks, specifically via the...
CVE-2026-89302 Post Voting System <= 1.0 - Unauthenticated SQLi via 'id' Parameter
The Post Voting System WordPress plugin through 1.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks...
PT-2026-110063
Name of the Vulnerable Software and Affected Versions Post Voting System versions prior to 1.1 Description An issue exists where the software fails to properly sanitize and escape the id parameter before incorporating it into a SQL query. This allows unauthenticated users to execute SQL injection...
CVE-2026-89302: Improper Neutralization of Special Elements used in an SQL Command
The Post Voting System WordPress plugin through 1.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks...
WordPress Post Voting System plugin <= 1.0 - Subscriber+ SQLi vulnerability
Subscriber+ SQLi vulnerability discovered by Erwan LR WPScan in WordPress Plugin Post Voting System versions = 1.0...
CVE-2026-89303
The Post Voting System WordPress plugin through 1.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing any authenticated user to perform SQL injection attacks...
CVE-2026-89303 Post Voting System <= 1.0 - Subscriber+ SQLi via 'row' Parameter
The Post Voting System WordPress plugin through 1.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing any authenticated user to perform SQL injection attacks...
CVE-2026-89303 Post Voting System <= 1.0 - Subscriber+ SQLi via 'row' Parameter
The Post Voting System WordPress plugin through 1.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing any authenticated user to perform SQL injection attacks...
CVE-2026-89303
The Post Voting System WordPress plugin (versions
EUVD-2026-88094
The Post Voting System WordPress plugin through 1.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing any authenticated user to perform SQL injection attacks...
PT-2026-99777
Name of the Vulnerable Software and Affected Versions Post Voting System WordPress plugin version 1.0 Description An issue exists where the software fails to properly sanitize and escape a parameter before incorporating it into a SQL query. This allows authenticated users to execute SQL injection...
CVE-2026-89303: Improper Neutralization of Special Elements used in an SQL Command
The Post Voting System WordPress plugin through 1.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing any authenticated user to perform SQL injection attacks...