CVE-2026-78288

CriticalCVSS 9.3

Published: 27/08/2026(UTC)Translated: 27/08/2026(UTC)NVD NIST

Summary

The Beautiful Taxonomy Filters plugin versions up to 2.4.6 contain an unauthenticated SQL Injection vulnerability. An attacker can manipulate database queries, potentially leading to unauthorized data access.

Risk Assessment

Risk of sensitive data leakage from the database, such as user data, and potential modification or deletion of data.

Recommendation

Update the Beautiful Taxonomy Filters plugin to the latest version that includes a fix for this vulnerability.

Original NVD description (English source)

Unauthenticated SQL Injection in Beautiful Taxonomy Filters <= 2.4.6 versions.