CVE-2026-19053

Name of the Vulnerable Software and Affected Versions ProSolution WP Client versions prior to 2.0.6

Description Unauthenticated visitors can trigger a blind SQL injection, a technique used to extract information from a database by observing the application's response to specific queries. The issue occurs because the plugin fails to sanitize and escape the jobID parameter before incorporating it into a SQL statement.

Recommendations Update ProSolution WP Client to version 2.0.6 or later. Avoid using the jobID parameter until the update is applied.