Security
Loading…

CVE-2026-88926

HIGHCVSS 8.6
View on NVD← Back to search
Description

The VikRentItems Flexible Rental Management System WordPress plugin before 1.2.4 does not sanitise and escape some of its parameters before using them in SQL statements, allowing unauthenticated users to perform SQL injection attacks.

Timeline
Published:September 19th, 2026 7:16 AM
Last modified:September 21st, 2026 1:34 PM
CVSS Scoring

CVSS v3: 8.6 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Weaknesses (CWE)
CWE-89
References & Reports
Advisories, patches, and third-party reports

Source: NIST NVD · Data may lag official sources by up to one minute