CVE-2026-40797

CriticalCVSS 9.3/10Last modified Jun 17, 2026

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saleswonder LLC WebinarIgnition allows Blind SQL Injection.

This issue affects WebinarIgnition: from n/a through 4.08.253.

Metrics

CVSS 3.1 9.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
May 5, 2026
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-407989.3Unauthenticated SQL Injection in wpForo Forum <= 3.0.4 versions.CVE-2026-407995.3Unauthenticated Broken Authentication in Simple Cloudflare Turnstile <= 1.38.0 versions.CVE-2026-40806.4The Easy Cart plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'add_to_cart' shortcode in all versions up to and inCVE-2026-408009.3Subscriber SQL Injection in ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes <= 1.5.3 versions.CVE-2026-408018.1Subscriber Broken Access Control in Wordable <= 8.2.10 versions.CVE-2026-408027.6Subscriber Settings Change in Pubjet | پاب‌جت <= 5.4.8 versions.CVE-2026-408037.1Unauthenticated Cross Site Scripting (XSS) in Jotform &#8211; AI Chatbot <= 3.8.2 versions.CVE-2026-408047.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kodezen LLC aBlocks ablocks allows RefCVE-2026-408057.7Subscriber Arbitrary File Deletion in PeepSo <= 9.0.5.4 versions.CVE-2026-408067.1Unauthenticated Cross Site Scripting (XSS) in Blog, Posts and Category Filter for Elementor <= 2.1.0 versions.CVE-2026-408077.1Unauthenticated Cross Site Scripting (XSS) in CF7 Views &#8211; Complete Entry Management for Contact Form 7 <= 3.2.6 versions.CVE-2026-408086.5Subscriber Broken Access Control in Jetpack VideoPress <= 3.6 versions.
CVE-2026-40797: Critical severity, CVSS 9.3 | Vulnix