4 matches found
CVE-2026-120688
The EZ SQL Reports Shortcode Widget and DB Backup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'HTTPUSERAGENT demonstrated; more generally, any attacker-controllable DB column the saved report selects' parameter in all versions up to, and including, 5.25.25 due to...
CVE-2026-120688
The EZ SQL Reports Shortcode Widget and DB Backup plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 5.25.25 . The root cause is insufficient input sanitization and output escaping when the plugin processes SQL reports that select attacker-...
EUVD-2026-124975
The EZ SQL Reports Shortcode Widget and DB Backup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'HTTPUSERAGENT demonstrated; more generally, any attacker-controllable DB column the saved report selects' parameter in all versions up to, and including, 5.25.25 due to...
CVE-2026-120688 EZ SQL Reports Shortcode Widget and DB Backup <= 5.25.25 - Unauthenticated Stored Cross-Site Scripting via Comment User-Agent Header
The EZ SQL Reports Shortcode Widget and DB Backup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'HTTPUSERAGENT demonstrated; more generally, any attacker-controllable DB column the saved report selects' parameter in all versions up to, and including, 5.25.25 due to...