CVE-2026-19053

CriticalCVSS 9.1

Published: 10/08/2026(UTC)Updated: 10/08/2026(UTC)Translated: 10/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.16%

6th percentile - higher than 6% of all known CVEs

Summary

The ProSolution WP Client plugin before version 2.0.6 does not sanitize and escape a parameter before using it in a SQL statement reachable by unauthenticated visitors, leading to a blind SQL injection.

Risk Assessment

An attacker can manipulate database queries, potentially leading to data disclosure or modification.

Recommendation

Update the plugin to version 2.0.6 or later.

Original NVD description (English source)

The ProSolution WP Client WordPress plugin before 2.0.6 does not sanitise and escape a parameter before using it in a SQL statement reachable by unauthenticated visitors, leading to a blind SQL injection.