WordPress Bluff Post plugin <= 1.1.1 - Unauthenticated SQLi vulnerability

Unauthenticated SQLi vulnerability discovered by João Ramos Maciel in WordPress Plugin Bluff Post versions = 1.1.1...

CVE-2026-89237

The Bluff Post WordPress plugin through 1.1.1 does not sanitise and escape parameters before using them as identifiers in a SQL query, allowing unauthenticated attackers to append additional SQL and extract sensitive information from the database...

EUVD-2026-87527

The Bluff Post WordPress plugin through 1.1.1 does not sanitise and escape parameters before using them as identifiers in a SQL query, allowing unauthenticated attackers to append additional SQL and extract sensitive information from the database...

CVE-2026-89237 Bluff Post <= 1.1.1 - Unauthenticated SQLi via 'table_name' and 'column_name' Parameters

The Bluff Post WordPress plugin through 1.1.1 does not sanitise and escape parameters before using them as identifiers in a SQL query, allowing unauthenticated attackers to append additional SQL and extract sensitive information from the database...

CVE-2026-89237

The Bluff Post WordPress plugin (versions through 1.1.1 ) is vulnerable to an unauthenticated SQL injection . The root cause is the failure to sanitize and escape parameters—specifically the 'table_name' and 'column_name' parameters—before using them as identifiers in a SQL query. This allows an ...

CVE-2026-89237 Bluff Post <= 1.1.1 - Unauthenticated SQLi via 'table_name' and 'column_name' Parameters

The Bluff Post WordPress plugin through 1.1.1 does not sanitise and escape parameters before using them as identifiers in a SQL query, allowing unauthenticated attackers to append additional SQL and extract sensitive information from the database...

CVE-2026-89237: Improper Neutralization of Special Elements used in an SQL Command

The Bluff Post WordPress plugin through 1.1.1 does not sanitise and escape parameters before using them as identifiers in a SQL query, allowing unauthenticated attackers to append additional SQL and extract sensitive information from the database...

PT-2026-99246

Name of the Vulnerable Software and Affected Versions Bluff Post WordPress plugin versions prior to 1.1.2 Description Insufficient sanitization and escaping of parameters used as identifiers in a SQL query allow unauthenticated attackers to append additional SQL commands. This can lead to the...

EUVD-2025-28462

Malicious code in bioql PyPI...

WordPress Bluff Post plugin cross-site request forgery vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A cross-site request forgery vulnerability exists in the WordPress Bluff Post plugin that stems from the WEB application not adequately verifying that a request is from a truste...

CVE-2025-52784

Cross-Site Request Forgery CSRF vulnerability in hideoguchi Bluff Post bluff-post allows Stored XSS.This issue affects Bluff Post: from n/a through = 1.1.1...

CVE-2025-52784

Cross-Site Request Forgery CSRF vulnerability in hideoguchi Bluff Post bluff-post allows Stored XSS.This issue affects Bluff Post: from n/a through = 1.1.1...

CVE-2025-52784 WordPress Bluff Post plugin <= 1.1.1 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in hideoguchi Bluff Post bluff-post allows Stored XSS.This issue affects Bluff Post: from n/a through = 1.1.1...

CVE-2025-52784

CVE-2025-52784 describes a Cross-Site Request Forgery (CSRF) vulnerability in the Bluff Post WordPress plugin that allows Stored XSS. Affected software: Bluff Post versions from 0 through 1.1.1 (as stated). Root cause: insufficient CSRF protection enabling stored payload execution. Public sources...

CVE-2025-52784: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in hideoguchi Bluff Post bluff-post allows Stored XSS.This issue affects Bluff Post: from n/a through = 1.1.1...

WordPress plugin Bluff Post has a cross-site request forgeing vulnerability.

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A cross-site request forgery vulnerability exists in the WordPress Bluff Post plugin that stems from the WEB application not adequately verifying that a request is from a truste...

PT-2025-26416 · Unknown · Bluff Post

Name of the Vulnerable Software and Affected Versions: Bluff Post versions 1.1.1 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on the web application,...

WordPress Bluff Post plugin <= 1.1.1 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Bluff Post versions = 1.1.1...