Nobody

🚨 CVE-2026-82304 The Music Store WordPress plugin before 1.4.5 does not sanitise and escape user input before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users. 🎖@cveNotify

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 101.0.4951.41 **Description** The issue is related to an inappropriate implementation in iframe, which may allow a remote attacker to leak cross-origin data via a crafted HTML page. This could potentially disclose protected information. **Recommendations** For Google Chrome versions prior to 101.0.4951.41, update to version 101.0.4951.41 or later to resolve the issue. As a temporary workaround, consider restricting access to iframes from untrusted sources until the update is applied.