EUVD-2026-55009
GHSA-qv9m-hwg5-w7cf
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Unauthenticated remote injection over the network (AV:N/AC:L/PR:N/UI:N); blind SQLi primarily discloses data (C:H) with limited/uncertain write impact (I:L) and no availability effect (A:N).
Primary rating from Vendor (WPScan).
CVSS VectorVendor: WPScan
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Lifecycle Timeline
4DescriptionCVE.org
The ProSolution WP Client WordPress plugin before 2.0.6 does not sanitise and escape a parameter before using it in a SQL statement reachable by unauthenticated visitors, leading to a blind SQL injection.
Articles & Coverage 2
AnalysisAI
SQL injection in the ProSolution WP Client WordPress plugin (all versions before 2.0.6) lets remote attackers inject SQL through an unsanitized, unescaped parameter that is reachable without authentication, enabling blind extraction of database contents such as user credentials and secrets. Reported by WPScan, it carries a CVSS of 9.1 and has publicly available exploit code, though its EPSS probability is low (0.16%, 6th percentile) and it is not listed in CISA KEV. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires that the ProSolution WP Client plugin (version below 2.0.6) be installed and active on a reachable WordPress site; the vulnerable parameter is in a code path exposed to unauthenticated visitors (PR:N, UI:N), so no login, user interaction, or non-default configuration is needed beyond having the plugin enabled. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The signals are mixed. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An unauthenticated attacker sends a crafted HTTP request to the WordPress site with a malicious SQL payload in the vulnerable plugin parameter, using boolean- or time-based blind techniques to infer query results. Over successive requests they enumerate the wp_users table and exfiltrate password hashes and secret keys. … |
| Remediation | Vendor-released patch: 2.0.6 - upgrade the ProSolution WP Client plugin to version 2.0.6 or later, which addresses the missing sanitization and escaping. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: verify inventory of all WordPress sites using ProSolution WP Client plugin and identify affected versions prior to 2.0.6; assess immediate risk given public availability of exploit code. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Prosolution Wp Client
View allUnauthenticated SQL injection in the ProSolution WP Client WordPress plugin (all versions before 2.0.9) exposes arbitrar
Server-side request forgery in ProSolution WP Client WordPress plugin (all versions before 2.0.9) allows any authenticat
Unauthenticated arbitrary file upload leading to remote code execution affects the ProSolution WP Client WordPress plugi
Unauthenticated remote code execution in the ProSolution WP Client WordPress plugin (versions ≤ 2.0.0) allows attackers
Unauthenticated arbitrary file upload in ProSolution WP Client plugin (≤1.9.9) enables attackers to upload executable fi
Arbitrary file deletion in the ProSolution WP Client WordPress plugin (all versions through 2.0.8) lets unauthenticated
Missing authorization on two administrative AJAX endpoints in ProSolution WP Client WordPress plugin before 2.0.9 allows
Same weakness CWE-89 – SQL Injection
View allShare
External POC / Exploit Code
Leaving vuln.today