CVE-2026-78576 - Vulnerability Details

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Readabler	Readabler
Wordpress	Wordpress

No data.

References

No reference.

History

Tue, 01 Sep 2026 14:30:00 +0000

Type	Values Removed	Values Added
Title	Readabler < 2.0.18 - Unauthenticated SQL Injection
Weaknesses	CWE-89
References	https://patchstack.com/database/wordpress/plugin/readabler/vulnerability/wordpress-readabler-plugin-2-0-18-sql-injection-vulnerability https://www.wordfence.com/threat-intel/vulnerabilities/id/baaa9688-dfdc-4ab2-b033-fe2b13a42e77?source=cve
Metrics	cvssV3_1 `{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}` ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Tue, 01 Sep 2026 13:30:00 +0000

Type	Values Removed	Values Added
Description	The Readabler plugin for WordPress is vulnerable to SQL Injection in all versions up to 2.0.18 (exclusive) due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.	REJECT DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage.

Fri, 28 Aug 2026 21:00:00 +0000

Type	Values Removed	Values Added
First Time appeared		Readabler Readabler readabler Wordpress Wordpress wordpress
Vendors & Products		Readabler Readabler readabler Wordpress Wordpress wordpress

Tue, 25 Aug 2026 14:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Tue, 25 Aug 2026 09:45:00 +0000

Type	Values Removed	Values Added
Description		The Readabler plugin for WordPress is vulnerable to SQL Injection in all versions up to 2.0.18 (exclusive) due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
Title		Readabler < 2.0.18 - Unauthenticated SQL Injection
Weaknesses		CWE-89
References		https://patchstack.com/database/wordpress/plugin/readabler/vulnerability/wordpress-readabler-plugin-2-0-18-sql-injection-vulnerability https://www.wordfence.com/threat-intel/vulnerabilities/id/baaa9688-dfdc-4ab2-b033-fe2b13a42e77?source=cve
Metrics		cvssV3_1 `{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}`