CVE-2026-88926

HIGH CVSS 8.6 View on NVD ↗

Description

The VikRentItems Flexible Rental Management System WordPress plugin before 1.2.4 does not sanitise and escape some of its parameters before using them in SQL statements, allowing unauthenticated users to perform SQL injection attacks.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

References

https://wpscan.com/vulnerability/da39827b-f087-48f3-baa9-759709a3767e/

Published: Sep 19, 2026 07:16 UTC Modified: Sep 19, 2026 14:17 UTC