CVE-2026-95610

HighCVSS 8.5

Published: 09/10/2026(UTC)Updated: 09/10/2026(UTC)Translated: 09/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.21%

11th percentile - higher than 11% of all known CVEs

Summary

Blind SQL Injection vulnerability in the UpSolution Core. Affects versions from n/a through 9.3.

Risk Assessment

An attacker can execute database queries, potentially leading to data leakage or modification.

Recommendation

Update the UpSolution Core to the latest available version that includes the security fix.

Other vulnerabilities in UpSolution Core

CVE-2026-94166High
The UpSolution Core plugin for WordPress (up to version 8.44) contains a Reflected XSS vulnerability due to improper input neutralization. An attacker can inject malicious JavaScript that executes in the victim's browser.

Original NVD description (English source)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in UpSolution UpSolution Core us-core allows Blind SQL Injection.This issue affects UpSolution Core: from n/a through 9.3.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS