Veille CVE

Recherche « Unknown SaveTo Wishlist Lite »

1 CVE

  1. CVE-2026-89236 8.6 Élevée

    Unknown SaveTo Wishlist Lite

    The SaveTo Wishlist Lite WordPress plugin before 1.1.5 does not sanitise and escape parameters before using them in the ORDER BY clause of a SQL query, allowing unauthenticated attackers to append additional SQL queries and extract sensitive information from the database.