Back to overview

CVE-2026-8163

Description
The Infility Global WordPress plugin before 2.15.19 does not properly sanitize and escape some parameters before using them in SQL statements, leading to a SQL Injection vulnerability exploitable by authenticated users with Subscriber-level access and above.

Metadata

CVE ID
CVE-2026-8163
State
PUBLISHED
Assigner
WPScan
Reserved
2026-05-08 11:17 UTC
Published
2026-06-23 06:00 UTC
Last updated
2026-06-23 06:00 UTC
Vendor / Product
Unknown / Infility Global
Sources
cve.org  ·  NVD

Severity & Metrics

No CVSS data available.

Affected products (1)
VendorProductPlatformVersions
Unknown Infility Global — 0 < 2.15.19
Weakness (CWE)
CWESourceDescription
— cna CWE-89 SQL Injection
References (1)
Back to overview