NetSight
high8.6

CVE-2026-89299

The WP Verify API WordPress plugin through 1.0.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated use…

Impact

The WP Verify API WordPress plugin through 1.0.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks.

Affected products

ProductAffected versions
WP Verify API WordPress Plugin
through 1.0.0

Versions were read from the advisory text. No structured product data has been published for this record yet.

Weakness classification

References