PT-2026-68548
CVE-2026-65547
·
تاريخ النشر
2026-07-28
·
تاريخ التحديث
2026-08-06
الوصف من
CVSS 3.1
8.5
عاليةالمقاييسAV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L
Name of the Vulnerable Software and Affected Versions
Creative Mail versions prior to 1.7.0
Description
An issue exists in the Creative Mail plugin for WordPress and WooCommerce where insufficient escaping of user-supplied parameters and lack of proper preparation of SQL queries allow authenticated attackers with subscriber-level access or higher to perform SQL Injection. This allows the addition of malicious SQL queries to existing ones to extract sensitive information from the database.
Recommendations
Update to a version newer than 1.6.9.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾