Skip to content
Sign in
8.1 High

CVE-2026-15361 The Content Views WordPress plugin before 4.5 does not perform a capability check on one of its AJAX actions and does…

Description

The Content Views WordPress plugin before 4.5 does not perform a capability check on one of its AJAX actions and does not properly sanitise attacker-supplied data before using it in a SQL query, allowing any authenticated user, including Subscribers, to perform SQL injection attacks.

Affected products and versions

Product Affected versions Fixed in
Content Views 4.5 earliest → < 4.5 4.5

Other CVEs of Content Views

The 2 CVEs of Content Views →
CVE-2026-17517 The Content Views WordPress plugin before 4.5.1.2 does not check whether the user requesting a view is allowed to… 5.3 Medium
Track this CVE