6.8
Moyenne
CVE-2026-91833 The WX Subscribe 微信支付付费订阅 WordPress plugin through 1.2.1 does not sanitise and escape a parameter before…
Description
The WX Subscribe 微信支付付费订阅 WordPress plugin through 1.2.1 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated attackers to perform SQL injection attacks on installs where the payment key has not been configured.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WX Subscribe 微信支付付费订阅 1.2 | premières → 1.2.1 | Pas de correctif indiqué |