EUVD-2026-54383
GHSA-gp8v-vc4r-wpf4
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
AJAX endpoint is network-accessible (AV:N); Subscriber account is sole prerequisite (PR:L); SQL injection grants full DB read/write (C:H/I:H) with no service disruption (A:N).
Primary rating from Vendor (WPScan).
CVSS VectorVendor: WPScan
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Lifecycle Timeline
4DescriptionCVE.org
The Content Views WordPress plugin before 4.5 does not perform a capability check on one of its AJAX actions and does not properly sanitise attacker-supplied data before using it in a SQL query, allowing any authenticated user, including Subscribers, to perform SQL injection attacks.
AnalysisAI
SQL injection in the Content Views WordPress plugin before 4.5 exposes the underlying WordPress database to any authenticated user, including low-privilege Subscribers. Two compounding weaknesses drive this: a missing capability check on an AJAX action allows unprivileged users to reach a sensitive endpoint, and unsanitized attacker-controlled input is then passed directly into a raw SQL query. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires a valid WordPress account at the Subscriber role or higher (PR:L per CVSS) - this is the single binding prerequisite. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 8.1 score (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) accurately reflects a network-reachable, low-complexity flaw requiring only Subscriber-level access, with high confidentiality and integrity impact and no availability impact. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker registers a free Subscriber account on any WordPress site running Content Views below version 4.5 with open user registration enabled, then issues a crafted HTTP POST to wp-admin/admin-ajax.php targeting the plugin's unprotected AJAX action with a SQL injection payload embedded in an unsanitized parameter. A publicly available POC from WPScan lowers the skill threshold significantly. … |
| Remediation | The vendor-released fix is Content Views version 4.5; administrators should update immediately via the WordPress plugin dashboard or the WordPress plugin repository. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, audit all WordPress installations to identify which are running Content Views plugin and their current versions. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Content Views
View allSame weakness CWE-89 – SQL Injection
View allShare
External POC / Exploit Code
Leaving vuln.today