CVE-2026-65546

CriticalCVSS 9.3

Published: 06/08/2026(UTC)Translated: 06/08/2026(UTC)NVD NIST

Summary

Unauthenticated SQL Injection in Qode Tours versions up to 3.1.3.1.

An unauthenticated attacker can inject malicious SQL queries, potentially leading to data leakage or database modification.

Update the Qode Tours plugin to the latest version that addresses this vulnerability.

Original NVD description (English source)

Unauthenticated SQL Injection in Qode Tours <= 3.1.3.1 versions.