CVE-2026-115607
WordPress DXP ToolKit plugin <= 2.0.1 - SQL Injection vulnerability
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Public exploit
- None on Exploit-DB
Summary
The DXP ToolKit plugin for WordPress, developed by Crowd Favorite, is affected by this vulnerability. An attacker could exploit it by injecting malicious database commands, potentially allowing them to read, modify, or delete data stored in the website's database.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crowd Favorite DXP ToolKit dxp-toolkit allows SQL Injection.This issue affects DXP ToolKit: from n/a through 2.0.1.
Affected versions
- dxp-toolkit
through 2.0.1