CVE-2026-28142

creationtimestamp| type| source ---|---|--- 2026-08-13 15:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msxwgn54x22j...

CVE-2026-28142

Unauthenticated SQL Injection in Web Directory Free = 1.7.13 versions...

CVE-2026-28142

The CVE describes an Unauthenticated SQL Injection in the WordPress plugin Web Directory Free for versions up to 1.7.13 . Root cause details are not explicitly provided in the documents beyond the vulnerability type, but the CVSS v3.1 base score is 9.3 (CRITICAL) with high impact on confidentiali...

CVE-2026-28142 WordPress Web Directory Free plugin <= 1.7.13 - SQL Injection vulnerability

Unauthenticated SQL Injection in Web Directory Free = 1.7.13 versions...