Beveiligingsadvies

CVE-2026-14238

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-08-10 06:00:18

Laatst bijgewerkt 2026-08-11 14:56:20

Toegewezen door WPScan

CVSS-score 4.1

Status PUBLISHED

Beschrijving

The vitepos WordPress plugin before 3.6.0 does not sanitize or parameterize an identifier taken from a REST request body before using it in a database query in one of its report endpoints, allowing users with administrator-level access to perform SQL injection.

← Alle CVE's bekijken Bekijk op cve.org ↗