CVE-2026-112860EUVD-2026-108630GHSA-PVV6-J57P-H6CV
WordPress Participants Database plugin <= 2.7.8.5 - SQL Injection vulnerability
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Public exploit
- None on Exploit-DB
Summary
The Participants Database plugin for WordPress, made by xnau webdesign, is affected by this vulnerability. An attacker could exploit it to inject malicious database commands, potentially letting them view or manipulate data stored in the website's database without authorization.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in xnau webdesign Participants Database participants-database allows Blind SQL Injection.This issue affects Participants Database: from n/a through 2.7.8.5.
Affected versions
- participants-database
through 2.7.8.5