CVE-2026-74011

HighCVSS 7.6/10Last modified Oct 18, 2026

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in revmakx InfiniteWP Client allows Blind SQL Injection.

This issue affects InfiniteWP Client: from n/a through 1.13.9.

Metrics

CVSS 3.1 7.6/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Aug 20, 2026
Last modified
Oct 18, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-740128.8Deserialization of Untrusted Data vulnerability in TaxoPress allows Object Injection. This issue affects TaxoPress: from n/a through 3.51.0CVE-2026-740138.5Subscriber SQL Injection in eShipper Commerce <= 2.16.13 versions.CVE-2026-740149.9Subscriber Arbitrary File Upload in IT Residence <= 3.2.1 versions.CVE-2026-740159.3Unauthenticated SQL Injection in Readabler < 2.0.18 versions.CVE-2026-740169.9Subscriber Arbitrary File Upload in Smart Cleaning <= 4.8.6 versions.CVE-2026-740175.3Unauthenticated Broken Access Control in User Registration <= 5.2.7 versions.CVE-2026-740189.9Subscriber Arbitrary File Upload in Warehouse Cargo <= 2.6.9 versions.CVE-2026-740197.1Unauthenticated Broken Access Control in EPROLO Dropshipping <= 2.4.2 versions.CVE-2026-74028.1Improper Control of Interaction Frequency vulnerability in MeWare Software Development Inc. PDKS allows Flooding. This issue affects PDKS: CVE-2026-740207.5Unauthenticated Broken Access Control in Koji <= 2.2.1 versions.CVE-2026-740217.5Unauthenticated Broken Access Control in Chaplin <= 2.6.8 versions.CVE-2026-74035.3A security flaw has been discovered in geldata gel-mcp 0.1.0. This impacts the function list_rules/fetch_rule of the file src/gel_mcp/server