Filtered by vendor Wordpress-extensions
Subscriptions
Filtered by product Buildkit
Subscriptions
Total
1 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-94298 | 1 Wordpress-extensions | 1 Buildkit | 2026-10-02 | 6.2 Medium |
| The BuildKit WordPress plugin before 1.0.29 does not properly sanitise and escape data submitted by contributor-level users before storing it and later using it in a SQL query, allowing a Contributor to inject SQL that runs against the database once the resulting content is published and viewed by any unauthenticated visitor. | ||||
Page 1 of 1.