CVE-2026-57772

Name of the Vulnerable Software and Affected Versions WP Inventory Manager versions prior to 2.4.1

Description An SQL Injection issue exists in the WP Inventory Manager plugin for WordPress. Authenticated attackers with contributor-level access or higher can append additional SQL queries to existing ones due to insufficient escaping of user-supplied parameters and a lack of proper preparation of the SQL query. This allows for the extraction of sensitive information from the database via Blind SQL Injection, a technique used to infer data by observing the application's response to specific queries.

Recommendations Update WP Inventory Manager to a version newer than 2.4.0.