SQL Injection Vulnerability in MailArchiver for WordPress

CVE-2026-2831

What is CVE-2026-2831?

The MailArchiver plugin for WordPress is susceptible to SQL Injection attacks through the 'logid' parameter, affecting versions up to and including 4.5.0. Due to inadequate escaping of user-supplied input and insufficient preparation in the existing SQL query, authenticated attackers with Administrator-level access can manipulate existing SQL queries, potentially allowing them to extract sensitive information stored in the database. This vulnerability underscores the importance of applying security measures and updates to protect against potential data breaches.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References