CVE-2026-88930
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Oct 11, 2026
Vendor
unknown
Description
The Social Web Suite WordPress plugin through 4.1.12 does not require its shared secret to be set before accepting requests authorised by it, and does not sanitise and escape a parameter before using it in an SQL statement, allowing unauthenticated users to perform SQL injection attacks.