CVE-2026-89299

Name of the Vulnerable Software and Affected Versions WP Verify API versions prior to 1.0.1

Description Unauthenticated users can perform SQL injection attacks because the plugin fails to properly sanitize and escape the verify parameter before incorporating it into a SQL query. SQL injection is a technique where malicious SQL statements are inserted into entry fields for execution, potentially allowing unauthorized access to the database.

Recommendations Update WP Verify API to a version newer than 1.0.0. As a temporary workaround, restrict access to the verify parameter until the update is applied.