CVE-2026-14189

The CVE covers the WPBot WordPress plugin prior to version 8.5.2. The root cause is failure to validate administrator-configured field identifiers before they are used in a SQL query, enabling a second-order SQL injection when a visitor triggers a search. The vulnerability can be exploited by use...

vBulletin 5.x Remote Administrator Injection

Remote administrator injection vulnerability in vBulletin upgrade.php Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...