CVE-2026-7842

The Infility Global WordPress plugin (before 2.15.20) is vulnerable to time-based blind SQL injection via the orderby and order parameters in admin callbacks (import_list, url_detail, file_detail) due to lack of sanitization/validation. Authenticated users with Editor+ access can exploit this whe...