CVE-2026-12983

8.6 Élevée

Publiée le 19/08/2026 à 08:17 · Modifiée le 22/10/2026 à 18:09 · Analyse NVD reportée · Source : contact@wpscan.com

Description

The Dinatur WordPress plugin through 1.18 does not sanitize and escape user input before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks. The same handler also performs a database table truncation without any authorization check, allowing any unauthenticated visitor to wipe the Dinatur WordPress plugin through 1.18's data.

Traduire en français

Produits concernés

Unknown Dinatur

Scores CVSS

Version	Score	Source	Vecteur
3.1	8.6 Élevée	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N`

Faiblesses (CWE)

CWE-89

Références

https://wpscan.com/vulnerability/1369f95a-4ad3-4b0e-a87f-da88d200685e/

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories