SQL Injection Vulnerability in vTables Plugin for WordPress
CVE-2026-89216
Currently unrated
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2026-89216?
The vTables WordPress plugin versions prior to 0.3 contains a vulnerability that fails to properly sanitize and escape user input in SQL statements. This security flaw allows unauthenticated attackers to exploit the plugin, potentially facilitating SQL injection attacks. As a result, sensitive information from the database can be extracted, posing a significant risk to the security and integrity of the WordPress site.
Affected Version(s)
vTables 0 < 0.3
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.