EUVD-2026-65356
GHSA-p7qj-6prj-qvr8
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Unauthenticated network-accessible SQL injection yielding database read-only exfiltration; description and CVSS I:N/A:N confirm no write or availability impact.
Primary rating from Vendor (Wordfence).
CVSS VectorVendor: Wordfence
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Lifecycle Timeline
3DescriptionCVE.org
The Readabler plugin for WordPress is vulnerable to SQL Injection in all versions up to 2.0.18 (exclusive) due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
AnalysisAI
SQL Injection in the Readabler WordPress plugin affects all versions prior to 2.0.18, allowing unauthenticated remote attackers to append malicious SQL clauses to existing database queries and exfiltrate sensitive data from the WordPress database. The flaw stems from insufficient escaping of user-supplied input combined with unprepared SQL queries inside the plugin. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | No special conditions are required beyond the presence of the Readabler plugin at a version below 2.0.18 on a network-accessible WordPress installation. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 vector AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N places this at peak exploitability for a read-only injection: fully remote, unauthenticated, no user interaction, no special conditions, with high confidentiality impact. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An unauthenticated attacker sends a crafted HTTP request to a WordPress site running a vulnerable version of Readabler, injecting SQL syntax into an insufficiently sanitized parameter. The injected payload appends a UNION SELECT or stacked query clause, causing the database to return sensitive records such as WordPress user password hashes, email addresses, or stored plugin data. … |
| Remediation | Upgrade the Readabler WordPress plugin to version 2.0.18 or later, which is identified as the first non-vulnerable version per the Wordfence advisory (https://www.wordfence.com/threat-intel/vulnerabilities/id/baaa9688-dfdc-4ab2-b033-fe2b13a42e77) and the Patchstack report (https://patchstack.com/database/wordpress/plugin/readabler/vulnerability/wordpress-readabler-plugin-2-0-18-sql-injection-vulnerability). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: audit all WordPress installations to identify Readabler plugin presence and versions; implement Web Application Firewall rules to block SQL injection attempts targeting the vulnerable plugin. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-89 – SQL Injection
View allShare
External POC / Exploit Code
Leaving vuln.today