PT-2026-94185

Name of the Vulnerable Software and Affected Versions Yo WordPress plugin versions 1.1 through 1.3.1 Description An issue exists where the software fails to sanitize or parameterize the username request parameter before incorporating it into a SQL query. Because the parameter is read before...

CVE-2026-87963: Improper Neutralization of Special Elements used in an SQL Command

The Yo WordPress plugin from 1.1 through 1.3.1 does not sanitize or parameterize the username request parameter before using it in a SQL query, and reads it before WordPress applies its request escaping, allowing unauthenticated attackers to perform SQL injection and read arbitrary database...