CVE-2026-61969

Unauthenticated SQL Injection vulnerability in Listdom versions up to 5.6.0. An attacker can execute arbitrary SQL queries without authentication.

Risk includes unauthorized access to the database, potentially leading to data leakage, modification, or deletion.

Update the plugin to the latest patched version. Restrict access to the admin panel and monitor logs for suspicious queries.