CVE-2026-78576

Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage...

EUVD-2026-65356

The Readabler plugin for WordPress is vulnerable to SQL Injection in all versions up to 2.0.18 exclusive due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append...

CVE-2026-78576

...

CVE-2026-78576

...

CVE-2026-78576

The Readabler plugin for WordPress is vulnerable to SQL Injection in all versions up to 2.0.18 (exclusive). The root cause is insufficient escaping of a user-supplied parameter combined with a lack of adequate preparation on the existing SQL query. This allows unauthenticated attackers to append ...

CVE-2026-74015

Unauthenticated SQL Injection in Readabler 2.0.18 versions...

EUVD-2026-60819

Unauthenticated SQL Injection in Readabler 2.0.18 versions...

CVE-2026-74015 WordPress Readabler plugin < 2.0.18 - SQL Injection vulnerability

Unauthenticated SQL Injection in Readabler 2.0.18 versions...

CVE-2026-74015 WordPress Readabler plugin < 2.0.18 - SQL Injection vulnerability

Unauthenticated SQL Injection in Readabler 2.0.18 versions...

CVE-2026-74015

The WordPress Readabler plugin (versions before 2.0.18) has an unauthenticated SQL injection flaw allowing remote attackers to execute arbitrary SQL queries and exfiltrate sensitive data. CVSS 9.3 (Critical). PatchStack reports it; upgrading to 2.0.18 resolves the issue. No exploit code provided ...

PT-2026-77133

Name of the Vulnerable Software and Affected Versions Readabler versions prior to 2.0.18 Description An unauthenticated SQL Injection exists in the software. SQL Injection is a type of vulnerability that allows an attacker to interfere with the queries that an application makes to its database...