SZB-8e98fd26c9
Majestic Support WordPress plugin flagged with SQL injection flaw (EUVD-2026-114228)
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- ahmadmj
- Product
- Majestic Support
- First seen
Summary
The EUVD entry EUVD-2026-114228, relayed via a Mastodon post, lists a CVSS v3.1 score of 6.5 for the Majestic Support plugin. The entry says the plugin is vulnerable to generic SQL injection via the 'columns (array keys)' parameter in its affected versions.
If you use ahmadmj
Update Majestic Support to the latest fixed version once available
Check the EUVD entry for the exact affected version range
Monitor database logs for unusual query patterns
What the sources say 1
· Mastodon: “The Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin plugin for WordPress is vulnerable to generic SQL Injection via the 'columns (array keys)' parameter in all versions” Source