CVE-2026-15458

Name of the Vulnerable Software and Affected Versions SEO Booster versions prior to 7.3.2

Description An issue exists where insufficient escaping of user-supplied input and lack of proper preparation of SQL queries allow authenticated attackers with administrator-level access and above to perform SQL Injection. By manipulating the sort field parameter, an attacker can append additional SQL queries to extract sensitive information from the database.

Recommendations Update to a version newer than 7.3.1. As a temporary mitigation, restrict access to the functionality utilizing the sort field parameter.