CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

2 matches found

Cvelist•added 2026/10/16 6:00 a.m.•39 views

CVE-2026-103696 Mobile Builder <= 1.4.2 - Unauthenticated SQLi via 'delivery_id' Parameter

The Mobile builder WordPress plugin through 1.4.2 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks on sites that also run the WCFM Delivery add-on...

0.00268EPSS

SaveExploits0References1

CVE•added 2026/10/16 6:00 a.m.•9 views

CVE-2026-103696

The Mobile builder WordPress plugin (versions

6.8CVSS5.9AI score0.00268EPSS

SaveExploits0References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by