CVE-2026-18666

MediumCVSS 4.3

Published: 10/08/2026(UTC)Updated: 11/08/2026(UTC)Translated: 10/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.20%

10th percentile - higher than 10% of all known CVEs

Summary

The Library Management System WordPress plugin before version 3.6.7 does not sanitize and escape a user-supplied parameter before using it in a SQL statement. This allows users with a role as low as Subscriber to perform SQL injection and extract arbitrary data from the database, including user password hashes.

Risk Assessment

An attacker can access sensitive data, including user password hashes, potentially leading to account takeover and data confidentiality breach.

Recommendation

Update the Library Management System plugin to version 3.6.7 or later, which includes a fix for the SQL injection vulnerability.

Original NVD description (English source)

The Library Management System WordPress plugin before 3.6.7 does not sanitize and escape a user-supplied parameter before using it in a SQL statement, allowing users with a role as low as Subscriber to perform SQL injection and extract arbitrary data from the database, including user password hashes.