CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2026-10-31
WordPress Web 2.0 Directory Plugin SQL Injection Vulnerability (CVE-2026-15272) Security Advisory
[Affected Scope] All versions up to, and including, 2.10.12 of the Web 2.0 Directory plugin for WordPress
[Impact] Unauthenticated attackers can execute arbitrary SQL queries to extract sensitive database information
[Mitigation] Update the plugin to the latest secure version immediately and apply WAF rules to block SQL injection payloads