What is the CVSS score of CVE-2026-12582?

CVE-2026-12582 has a CVSS 3.1 base score of 8.6 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N. EPSS exploitation probability: 0.2%.

Is there a public PoC exploit available for CVE-2026-12582?

Yes, a public proof-of-concept exploit is available for CVE-2026-12582. Prioritise patching immediately. EPSS: 0.2%.

Is there a patch available for CVE-2026-12582?

Yes, a patch is available for CVE-2026-12582. Update the affected software to the latest version immediately.

Library Management System CVE-2026-12582

EUVD-2026-43293 HIGH

2026-07-13 WPScan

GHSA-qvmr-hx75-cf7j

WordPress SQLi Library Management System

8.6

CVSS 3.1 · Vendor: WPScan

Severity by source

Vendor (WPScan) PRIMARY

8.6 HIGH

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Primary rating from Vendor (WPScan) · only source for this CVE.

CVSS VectorVendor: WPScan

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Patch available

Jul 13, 2026 - 08:01 EUVD

CVE Published

Jul 13, 2026 - 06:00 cve.org

UNKNOWN (no severity yet)

DescriptionCVE.org

The Library Management System WordPress plugin before 3.5.8 does not sanitize and escape a user-supplied parameter before using it in a SQL statement, allowing unauthenticated attackers to perform SQL injection and extract arbitrary data from the database, including user password hashes.

Articles & Coverage 1

News 13 New WordPress Vulnerabilities - 1 Critical, 12 High, 4 With POC Jul 14, 2026

Analysis

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Library Management System

View all

CVE-2023-7111 CRITICAL Act Now POC

9.8 Dec 26

A vulnerability, which was classified as critical, was found in code-projects Library Management System 2.0. Rated criti

CVE-2022-37794 CRITICAL Act Now POC

9.8 Sep 12

In Library Management System 1.0 the /card/in-card.php file id_no parameters are vulnerable to SQL injection. Rated crit

CVE-2022-36735 CRITICAL Act Now POC

9.8 Aug 30

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at /admi

CVE-2022-36734 CRITICAL Act Now POC

9.8 Aug 30

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the RollNo parameter at /admi

CVE-2022-36733 CRITICAL Act Now POC

9.8 Aug 30

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the M_Id parameter at /admin/

CVE-2022-36732 CRITICAL Act Now POC

9.8 Aug 30

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /libraria

CVE-2022-36731 CRITICAL Act Now POC

9.8 Aug 30

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the RollNo parameter at /libr

CVE-2022-36730 CRITICAL Act Now POC

9.8 Aug 30

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at /libr

CVE-2022-36714 CRITICAL Act Now POC

9.8 Aug 30

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the Section parameter at /sta

CVE-2022-36713 CRITICAL Act Now POC

9.8 Aug 30

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the Section parameter at /lib

CVE-2022-36712 CRITICAL Act Now POC

9.8 Aug 30

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /staff/st

CVE-2022-36711 CRITICAL Act Now POC

9.8 Aug 30

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /staff/bo

Same technique SQLi

View all

CVE-2025-57819 CRITICAL POC

10.0

CVE-2017-8917 CRITICAL POC

9.8

CVE-2024-27956 CRITICAL POC

9.9

CVE-2014-3704 HIGH POC

7.5

CVE-2016-2555 CRITICAL POC

9.8

CVE-2016-8582 CRITICAL POC

9.8

CVE-2013-0333 HIGH POC

7.5

CVE-2015-7297 HIGH POC

7.5

CVE-2026-12582 vulnerability details – vuln.today

Back

Library Management System CVE-2026-12582

Severity by source

CVSS VectorVendor: WPScan

Lifecycle Timeline

DescriptionCVE.org

Articles & Coverage 1

Analysis

Unlock full vulnerability intelligence

More in Library Management System

Same technique SQLi

Share

External POC / Exploit Code