Review
Post Voting System
CVE published 2026-09-28
CVE-2026-89303
The Post Voting System WordPress plugin through 1.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing any authenticated user to perform SQL injection attacks. This vulnerability can lead to potential data breaches or system compromise. Defenders responsible for WordPress installations with the Post Voting System plugin should assess exposure and prioritize verifica [truncated]