CVE-2026-89213 Llavero.io <= 0.1.4 - Unauthenticated Blind SQLi via 'cill_login' Parameter

The Llavero.io WordPress plugin through 0.1.4 does not properly sanitise and escape a parameter before using it in a SQL statement, which allows unauthenticated attackers to perform SQL injection attacks and read data from the database...

CVE-2026-89213

The Llavero.io WordPress plugin (versions through 0.1.4 ) is vulnerable to an unauthenticated Blind SQL injection due to improper sanitization and escaping of the 'cill_login' parameter in a SQL statement. An attacker can exploit this flaw to read data from the database . While the vulnerability ...