CVE-2026-16949

The Term Pages WordPress plugin versions prior to 2.0.0 is vulnerable to an unauthenticated SQL injection due to the tp_lookup vulnerability. The flaw exists because the plugin fails to properly sanitize and escape a parameter before incorporating it into a SQL statement. This allows an external ...

CVE-2026-16949

The Term Pages WordPress plugin before 2.0.0 does not properly sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated attackers to perform SQL injection attacks...

EUVD-2026-55015

The Term Pages WordPress plugin before 2.0.0 does not properly sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated attackers to perform SQL injection attacks...

CVE-2026-16949 Term Pages < 2.0.0 - Unauthenticated SQL Injection via tp_lookup

The Term Pages WordPress plugin before 2.0.0 does not properly sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated attackers to perform SQL injection attacks...