CVE-2026-108125CWE-89sql-injection

CVE-2026-108125

published October 9, 2026

CVSS

7.1

EPSS

Percentile

12.1

In the wild

Unconfirmed

What it is

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in wp-post-author.

This issue affects wp-post-author version 4.0.0 prior to 4.1.0.

The record

Technical detail

CVSS: 7.1 · NONE
CVSS v4.0: 7.1 · CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS: 0.00222 · 12.1th percentile
Weakness: CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published: 2026-10-09T19:17Z

References (1)

EPSS history

Timeline