Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-89302 1 Wordpress-extensions 1 Post Voting System 2026-10-19 8.6 High
The Post Voting System WordPress plugin through 1.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks.
CVE-2026-89303 1 Wordpress-extensions 1 Post Voting System 2026-09-28 6.4 Medium
The Post Voting System WordPress plugin through 1.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing any authenticated user to perform SQL injection attacks.