high8.6
CVE-2026-89216
The vTables WordPress plugin before 0.3 does not properly sanitise and escape a parameter before using it in a SQL statement, which allows unauthenticated atta…
Impact
The vTables WordPress plugin before 0.3 does not properly sanitise and escape a parameter before using it in a SQL statement, which allows unauthenticated attackers to perform SQL injection attacks and extract data from the database.
Affected products
| Product | Affected versions |
|---|---|
| VTables WordPress Plugin | before 0.3 |
Versions were read from the advisory text. No structured product data has been published for this record yet.