CVE-2026-16061: Improper Neutralization of Special Elements used in an SQL Command

The Rest Routes WordPress plugin through 5.5.5 does not sanitize and validate a value taken from the URL of one of its public REST routes before using it in a SQL query, allowing unauthenticated attackers to perform SQL injection attacks...

PT-2026-83393

Name of the Vulnerable Software and Affected Versions Rest Routes WordPress plugin versions prior to 5.5.6 Description An issue exists where a value taken from the URL of a public REST route is not properly sanitized or validated before being used in a SQL query. This allows unauthenticated...