Skip to content
Sign in
8.6 High

CVE-2026-88930 The Social Web Suite WordPress plugin through 4.1.12 does not require its shared secret to be set before accepting…

Description

The Social Web Suite WordPress plugin through 4.1.12 does not require its shared secret to be set before accepting requests authorised by it, and does not sanitise and escape a parameter before using it in an SQL statement, allowing unauthenticated users to perform SQL injection attacks.

Affected products and versions

Product Affected versions Fixed in
Social Web Suite 4.1 earliest → 4.1.12 No fix stated

Other CVEs of Social Web Suite

The 2 CVEs of Social Web Suite →
CVE-2026-88931 The Social Web Suite WordPress plugin through 4.1.12 does not restrict which of its settings may be written through… 5.3 Medium
Track this CVE