CVE-2026-107786

The CatFolders WordPress plugin versions prior to 2.5.7 is vulnerable to an SQL injection attack. The root cause is the improper sanitization and escaping of a user-controlled sort setting before it is utilized in a SQL query. This vulnerability can be exploited by authenticated users who possess...