CVE-2026-96822

CriticalCVSS 9.3/10Last modified Sep 30, 2026

Description

Unauthenticated SQL Injection in Books Gallery <= 4.8.3 versions.

Metrics

CVSS 3.1 9.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Sep 30, 2026
Last modified
Sep 30, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-968237.5Unauthenticated Arbitrary Content Deletion in Customer Reviews for WooCommerce <= 5.120.0 versions.CVE-2026-968246.8Editor Arbitrary File Deletion in Template Kit – Import <= 1.0.16 versions.CVE-2026-968254.2Subscriber Bypass Vulnerability in All In One WP Security & Firewall <= 5.4.8 versions.CVE-2026-968267.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shazzad Hossain Khan W4 Post List alloCVE-2026-968277.6Administrator SQL Injection in Admin Notices Manager <= 1.6.0 versions.CVE-2026-968287.6Administrator SQL Injection in Category Discount Woocommerce <= 5.18 versions.CVE-2026-968296.5Contributor Cross Site Scripting (XSS) in The Plus Addons for Elementor Page Builder Lite <= 6.5.1 versions.CVE-2026-968307.1Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.9 versions.CVE-2026-968318.8Contributor PHP Object Injection in Themify Builder <= 7.8.1 versions.CVE-2026-968327.2Shop manager PHP Object Injection in Content Egg <= 6.3.1 versions.CVE-2026-968337.2Editor PHP Object Injection in Ultimate Addons for Contact Form 7 <= 3.5.51 versions.CVE-2026-968346.5Subscriber Sensitive Data Exposure in GiveWP <= 4.16.9 versions.
CVE-2026-96822: Critical severity, CVSS 9.3 | Vulnix