CVE-2026-107786
The CatFolders WordPress plugin before 2.5.7 does not properly sanitize and escape a user-controlled sort setting before using it in a SQL
CVSS
—
Sem CVSS
EPSS
0.2%
p6
KEV
—
Exploit Today
2
0-100
Publicado: 5 de nov. de 2026 · Última mod.: 5 de nov. de 2026
Ainda não há histórico EPSS suficiente.
The CatFolders WordPress plugin before 2.5.7 does not properly sanitize and escape a user-controlled sort setting before using it in a SQL query, allowing authenticated users with upload capability (Author and above) to perform SQL injection attacks.
Nenhum CVE relacionado por CWE ou produto.