← Back to Dashboard

CVE-2026-104122

MEDIUM NVD
CVSS Score
6.8
Severity
MEDIUM
Source
NVD
Published
Oct 17, 2026
Description

The Ukr-To-Lat WordPress plugin through 1.3.5 does not sanitize and escape a term name before using it in a SQL query, allowing users with Contributor-level access and above to perform SQL injection attacks.

View Full Details ← Back