CVE-2026-15361

Name of the Vulnerable Software and Affected Versions Content Views versions prior to 4.5

Description An issue exists where the plugin fails to perform a capability check on an AJAX action and does not properly sanitize data provided by the user before incorporating it into a SQL query. This allows any authenticated user, including those with Subscriber privileges, to execute SQL injection attacks via the preview request action. SQL injection is a technique where malicious SQL statements are inserted into entry fields for execution, potentially allowing unauthorized access to the database.

Recommendations Update Content Views to version 4.5 or later.