CVE-2026-81800 Par avisverifies CVE debrief

Who should care

Administrators and security teams responsible for WordPress installations using the Verified Reviews (Avis Vérifiés) plugin, especially those with versions up to 2.4.6, should assess their exposure and prioritize remediation.

Why it matters

CVE-2026-81800 is a critical unauthenticated SQL injection vulnerability in the Verified Reviews (Avis Vérifiés) plugin for WordPress. It requires immediate attention from administrators and security teams to prevent potential data breaches and service disruptions.

• Potential data extraction from the database.
• Possible disruption of service through database manipulation.
• Increased risk of lateral movement within the network.
• Need for urgent patching to prevent exploitation.

Technical summary

The Verified Reviews (Avis Vérifiés) plugin for WordPress, version up to 2.4.6, is vulnerable to an unauthenticated SQL injection attack. This vulnerability is due to insufficient sanitization of user inputs, allowing an attacker to inject malicious SQL code. The vulnerability has a CVSS score of 9.3, indicating critical severity.

Defensive priority

High priority remediation is recommended for systems using the affected plugin version.

Recommended defensive actions

• Immediately update the Verified Reviews (Avis Vérifiés) plugin to a version beyond 2.4.6.
• Review database logs for potential suspicious activity.
• Implement additional monitoring for unusual database queries.

Evidence notes

The vulnerability was reported by Patchstack and is tracked under CVE-2026-81800. The NVD entry is currently Deferred.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.