CRITICAL
9.3 CVE-2026-112860 Published 23 Oct 2026
Participants Database WordPress Plugin Blind SQL Injection Vulnerability
Worried this affects your website?
Participants Database, a WordPress plugin by xnau webdesign, is affected by an SQL injection vulnerability that allows blind SQL injection.
The issue stems from improper neutralization of special elements used in an SQL command.
- Affected versions: from n/a through 2.7.8.5.
Reference: CVE-2026-112860 on NVD
← Back to Security News