CVE-2026-18666
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
The Library Management System WordPress plugin before version 3.6.7 does not sanitize and escape a user-supplied parameter before using it in a SQL statement. This allows users with a role as low as Subscriber to perform SQL injection and extract arbitrary data from the database, including user password hashes.
Risk Assessment
An attacker can access sensitive data, including user password hashes, potentially leading to account takeover and data confidentiality breach.
Recommendation
Update the Library Management System plugin to version 3.6.7 or later, which includes a fix for the SQL injection vulnerability.
Other vulnerabilities in Library Management System
See all- CVE-2026-56034Critical
An unauthenticated SQL Injection vulnerability exists in Library Management System versions 3.5.7 and earlier. An attacker can remotely execute arbitrary SQL queries, leading to unauthorized database access.
- CVE-2026-12582High
The Library Management System WordPress plugin before version 3.5.8 does not sanitize or escape a user-supplied parameter before using it in a SQL statement, allowing unauthenticated attackers to perform SQL injection and extract arbitrary data from the database, including user password hashes.
- CVE-2025-9755Medium
A vulnerability was discovered in Khanakag-17 Library Management System up to 60ed174506094dcd166e34904a54288e5d10ff24 involving cross-site scripting in the file /index.php. Manipulation of the msg argument allows remote attack execution. The exploit is publicly available and may be used.
Original NVD description (English source)
The Library Management System WordPress plugin before 3.6.7 does not sanitize and escape a user-supplied parameter before using it in a SQL statement, allowing users with a role as low as Subscriber to perform SQL injection and extract arbitrary data from the database, including user password hashes.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS