SQL Injection Vulnerability in SPS-Suite WordPress Plugin by WPScan
CVE-2026-93000
Currently unrated
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2026-93000?
The SPS-Suite plugin for WordPress, up to version 1.4.0, has a significant vulnerability where it fails to properly sanitize the search query when utilizing the static-page search feature. This oversight allows unauthorized attackers to craft malicious SQL queries, potentially leading to unauthorized access or manipulation of the database. As a result, it is critical for site administrators to review their plugin versions and apply necessary updates or mitigations to safeguard against possible SQL injection exploits.
Affected Version(s)
SPS-Suite 0 <= 1.4.0
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.