CVE-2026-104953
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Oct 07, 2026
Vendor
unknown
Description
The MPG WordPress plugin before 4.2.3 does not properly validate the structure of imported project data before using it in a database query, allowing users with the Editor role or higher to perform SQL injection attacks and read sensitive data such as password hashes.