PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-108179 PluginUs.Net CVE debrief

The CVE-2026-108179 vulnerability is a SQL Injection issue in the WordPress WOLF plugin, affecting versions up to 1.1.1. This vulnerability allows for Blind SQL Injection, posing a significant risk to WordPress installations using the affected plugin versions. The vulnerability's CVSS score of 7.6 indicates a high severity level. Defenders should assess exposure and apply patches or mitigations to prevent potential SQL Injection attacks. The WOLF plugin is used for bulk editing, and its vulnerability could lead to unauthorized data access or modifications. To address this issue, defenders should verify if their WordPress installations are using affected versions of the WOLF plugin,

Vendor
PluginUs.Net
Product
WOLF
CVSS
HIGH 7.6
CISA KEV
Not listed in stored evidence
Original CVE published
2026-10-13
Original CVE updated
2026-10-13
Advisory published
2026-10-13
Advisory updated
2026-10-13

Who should care

Defenders responsible for WordPress installations using the WOLF plugin should assess exposure and apply patches or mitigations to prevent potential SQL Injection attacks.

Why it matters

The CVE-2026-108179 vulnerability is a SQL Injection issue in the WordPress WOLF plugin, affecting versions up to 1.1.1. Defenders should assess exposure and apply patches or mitigations to prevent potential SQL Injection attacks.

  • Defenders need to verify if their WordPress installations are using affected versions of the WOLF plugin.
  • SQL Injection attacks could lead to unauthorized data access or modifications.
  • Defenders should prioritize patching or mitigating the vulnerability to prevent potential SQL Injection attacks.
  • The vulnerability's CVSS score of 7.6 indicates a high severity level.

Technical summary

The CVE-2026-108179 vulnerability is a SQL Injection issue in the WordPress WOLF plugin, affecting versions up to 1.1.1. This vulnerability allows for Blind SQL Injection, posing a significant risk to WordPress installations using the affected plugin versions.

Defensive priority

Defenders should prioritize assessing exposure and applying patches or mitigations to prevent potential SQL Injection attacks.

Recommended defensive actions

  • Assess exposure by checking if the WOLF plugin version is 1.1.1 or earlier
  • Apply patches or updates to the WOLF plugin to prevent SQL Injection attacks
  • Monitor for potential SQL Injection attempts targeting the WOLF plugin

Evidence notes

The CVE record and source item provide details on the vulnerability, including its CVSS score of 7.6 and the affected plugin versions. The official CVE Program record (CVE-2026-108179) and the NIST NVD detail page (CVE-2026-108179) offer source-provided CVE metadata and vulnerability assessments. The source item (WordPress WOLF plugin <= 1.1.1 - SQL Injection vulnerability) provides additional information on the vulnerability. Defenders should verify the affected scope, severity, and

Sources and references

Verified primary and authoritative sources

  • CVE-2026-108179 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-108179

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-108179 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-108179

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.