Aller au contenu
Se connecter
6.8 Moyenne

CVE-2026-91074 The BSK PDF Manager WordPress plugin through 3.8.1 does not properly sanitise and escape a parameter before using it…

Description

The BSK PDF Manager WordPress plugin through 3.8.1 does not properly sanitise and escape a parameter before using it in a SQL statement, which could allow authenticated users with contributor-level access and above to perform SQL injection attacks and read sensitive data such as administrator password hashes from the database.

Produits et versions touchés

Produit Versions touchées Corrigé en
BSK PDF Manager 3.8 premières → 3.8.1 Pas de correctif indiqué

Autres CVE de BSK PDF Manager

Les 2 CVE de BSK PDF Manager →
CVE-2021-24860 The BSK PDF Manager WordPress plugin before 3.1.2 does not validate and escape the orderby and order parameters before… Non notée
Suivre cette CVE