A SQL Injection vulnerability exists in the WordPress Vitepos plugin versions up to 3.6.1. This issue allows for Blind SQL Injection attacks. The vulnerability is rated as HIGH with a CVSS score of 7.6. Defenders and administrators of WordPress installations using the Vitepos plugin should assess their exposure and take necessary actions to mitigate the vulnerability. The CVE record and source item provid [truncated]
The CVE-2026-57385 vulnerability is a SQL Injection issue in the Vitepos plugin, specifically in versions up to and including 3.4.2. This vulnerability allows for Blind SQL Injection, which can be exploited by attackers to manipulate database queries. The CVSS score for this vulnerability is 8.5, indicating a high severity level. Users of Vitepos plugin version 3.4.2 or earlier should apply patches to pre [truncated]
