CVE-2026-88930

Name of the Vulnerable Software and Affected Versions Social Web Suite versions prior to 4.1.13

Description The Social Web Suite WordPress plugin fails to require a shared secret before accepting authorized requests. Additionally, it does not sanitize or escape a parameter used in an SQL statement, which enables unauthenticated users to execute SQL injection attacks. SQL injection is a technique where malicious SQL statements are inserted into entry fields for execution, potentially allowing unauthorized access to the database.

Recommendations Update Social Web Suite to a version newer than 4.1.12.