CVE-2026-8163

Name of the Vulnerable Software and Affected Versions Infility Global WordPress plugin versions prior to 2.15.19

Description Insufficient sanitization and escaping of parameters used in SQL statements allow authenticated users with Subscriber-level access and above to perform SQL Injection. SQL Injection is a technique where an attacker inserts malicious SQL code into a query, potentially allowing them to manipulate or access the database.

Recommendations Update to version 2.15.19 or later.