medium6.8
CVE-2026-89237
The Bluff Post WordPress plugin through 1.1.1 does not sanitise and escape parameters before using them as identifiers in a SQL query, allowing unauthenticated…
Impact
The Bluff Post WordPress plugin through 1.1.1 does not sanitise and escape parameters before using them as identifiers in a SQL query, allowing unauthenticated attackers to append additional SQL and extract sensitive information from the database.
Affected products
| Product | Affected versions |
|---|---|
| Bluff Post WordPress Plugin | through 1.1.1 |
Versions were read from the advisory text. No structured product data has been published for this record yet.