CVE-2026-59525

CriticalCVSS 9.3

Published: 23/07/2026(UTC)Updated: 23/07/2026(UTC)Translated: 24/07/2026(UTC)NVD NIST

Summary

The Participants Database plugin versions up to 2.7.8.3 contain an unauthenticated SQL injection vulnerability. An attacker can send crafted requests to execute arbitrary SQL queries.

Risk Assessment

Unauthorized database access, data leakage or modification of user data.

Recommendation

Update the Participants Database plugin to the latest available version.

Original NVD description (English source)

Unauthenticated SQL Injection in Participants Database <= 2.7.8.3 versions.