CVE-2026-116059

The LetsRecover WordPress plugin (version 1.2.0 and below ) is vulnerable to an unauthenticated SQL injection due to improper sanitization of user-supplied values. Specifically, a value used as a database column name in an unauthenticated AJAX action can be manipulated to append malicious SQL. At...