PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-48967 Dylan Kuhn CVE debrief

A high-severity SQL injection vulnerability, rated 8.5 CVSS, was disclosed on June 17, 2026, in the Geo Mashup WordPress plugin versions up to 1.13.19. This vulnerability allows subscribers to inject malicious SQL code, potentially leading to data breaches and unauthorized access. The vulnerability was reported by Patchstack and is tracked as CVE-2026-48967. Users of the affected plugin should take immediate action to mitigate the risk. The CVE record and NVD detail provide further information on this vulnerability.

Vendor
Dylan Kuhn
Product
Geo Mashup
CVSS
HIGH 8.5
CISA KEV
Not listed in stored evidence
Original CVE published
2026-06-17
Original CVE updated
2026-06-17
Advisory published
2026-06-17
Advisory updated
2026-06-17

Who should care

Administrators and users of the Geo Mashup WordPress plugin versions up to 1.13.19 should be aware of this vulnerability and take necessary actions to protect their sites. Additionally, security teams and WordPress administrators should prioritize patching this vulnerability to prevent potential attacks.

Technical summary

The CVE-2026-48967 vulnerability is a SQL injection issue in the Geo Mashup WordPress plugin. It allows subscribers to inject malicious SQL code, which can lead to data breaches and unauthorized access. The vulnerability has a CVSS score of 8.5 and is considered high-severity. The affected plugin versions are up to 1.13.19.

Defensive priority

High

Recommended defensive actions

  • Update the Geo Mashup plugin to a version beyond 1.13.19
  • Implement a Web Application Firewall (WAF) to detect and prevent SQL injection attacks
  • Regularly monitor plugin and theme updates for known vulnerabilities
  • Use strong passwords and limit login attempts
  • Regularly back up WordPress sites and databases
  • Consider using a security plugin to enhance WordPress security

Evidence notes

The vulnerability was reported by Patchstack and is tracked as CVE-2026-48967. The CVE record and NVD detail provide further information on this vulnerability. The CVSS score of 8.5 indicates a high-severity vulnerability.

Official resources

public