Skip to content
Sign in
6.8 Medium

CVE-2026-91074 The BSK PDF Manager WordPress plugin through 3.8.1 does not properly sanitise and escape a parameter before using it…

Description

The BSK PDF Manager WordPress plugin through 3.8.1 does not properly sanitise and escape a parameter before using it in a SQL statement, which could allow authenticated users with contributor-level access and above to perform SQL injection attacks and read sensitive data such as administrator password hashes from the database.

Affected products and versions

Product Affected versions Fixed in
BSK PDF Manager 3.8 earliest → 3.8.1 No fix stated

Other CVEs of BSK PDF Manager

The 2 CVEs of BSK PDF Manager →
CVE-2021-24860 The BSK PDF Manager WordPress plugin before 3.1.2 does not validate and escape the orderby and order parameters before… Not rated
Track this CVE