CVE-2026-19049

Name of the Vulnerable Software and Affected Versions ProSolution WP Client versions prior to 2.0.9

Description An issue exists where a cookie value is not sanitized before being used in SQL queries. This cookie is processed on every request without authentication or capability checks, allowing unauthenticated users to read arbitrary data from the database and delete records stored by the plugin. The vulnerable component is the removesite cookie.

Recommendations Update ProSolution WP Client to version 2.0.9 or later. As a temporary mitigation, restrict or block the use of the removesite cookie.