CVE-2026-4079

CVE-2026-4079 affects the WordPress plugin SQL Chart Builder prior to 2.3.8. The root cause is improper escaping of user input that is concatenated into SQL queries used by the dynamic filter functionality, enabling unauthenticated SQL Injection. The connected documents confirm the vulnerability ...