anonhaven

CVE-2026-88926

NONE EPSS 0.18%
Updated Sep 19, 2026
Unknown
Parameter Value
Affected Versions before 1.2.4
Type CWE-89 SQL Injection
Vendor Unknown
Public PoC No

The VikRentItems Flexible Rental Management System WordPress plugin before 1.2.4 does not sanitise and escape some of its parameters before using them in SQL statements, allowing unauthenticated users to perform SQL injection attacks.

Weakness Type (CWE)

CWE-89 SQL Injection

Vulnerable Products

unknown:vikrentitems flexible rental management system

References 1

https://wpscan.com/vulnerability/da39827b-f087-48f3-baa9-759709a3767e/
contact@wpscan.com
Share Post Share Share Share

Related Vulnerabilities

CVE-2026-88824

Unknown

None

CVE-2026-86814

Unknown

None

CVE-2026-86591

Unknown

None

CVE-2026-85680

Unknown

None

CVE-2026-85574

Unknown

None