SecvalisbySYSDEVOPS.EU
CVE Catalog
EnglishPolski

CVE-2026-42717

HighCVSS 7.6
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.28%

19th percentile - higher than 19% of all known CVEs

Summary

SQL Injection vulnerability in the administrator panel of the Leyka plugin in versions up to 3.32.3.

Risk Assessment

An attacker with administrator privileges can manipulate SQL queries, potentially leading to unauthorized data access or modification.

Recommendation

Update the Leyka plugin to the latest version that includes a fix for this vulnerability.

Other vulnerabilities in Leyka

Original NVD description (English source)

Administrator SQL Injection in Leyka <= 3.32.3 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS