CVE-2026-89234

The WP-Partner WordPress plugin through 1.2.1 does not sanitise and escape a parameter before using it in a SQL query, allowing unauthenticated attackers to append additional SQL queries and extract sensitive information from the database...

CVE-2026-89234 WP-Partner <= 1.2.1 - Unauthenticated SQLi via 'id' Parameter

The WP-Partner WordPress plugin through 1.2.1 does not sanitise and escape a parameter before using it in a SQL query, allowing unauthenticated attackers to append additional SQL queries and extract sensitive information from the database...

EUVD-2026-96784

The WP-Partner WordPress plugin through 1.2.1 does not sanitise and escape a parameter before using it in a SQL query, allowing unauthenticated attackers to append additional SQL queries and extract sensitive information from the database...

CVE-2026-89234

The WP-Partner WordPress plugin (versions through 1.2.1 ) is vulnerable to an unauthenticated SQL injection due to the lack of proper sanitization and escaping of the 'id' parameter before it is used in a SQL query. This flaw allows an attacker to append additional SQL queries to extract sensitiv...