CVE-2026-88930
EUVD-2026-9677911.10.2026, 07:17
The Social Web Suite WordPress plugin through 4.1.12 does not require its shared secret to be set before accepting requests authorised by it, and does not sanitise and escape a parameter before using it in an SQL statement, allowing unauthenticated users to perform SQL injection attacks.
Awaiting analysis
This vulnerability is currently awaiting analysis.