SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-74011

HIGH · CVSS 7.6 EPSS 0.23%

Source: NVD + CISA KEV + EPSS · Published 2026-08-20 · Last synced 2026-09-18

CyberRota Analysis

AI-Generated

The vulnerability in InfiniteWP Client allows for Blind SQL Injection due to improper neutralization of special elements in SQL commands, potentially enabling attackers to manipulate database queries and extract sensitive information. Organizations using versions up to 1.13.9 should prioritize patching this high-severity flaw to mitigate the risk of unauthorized data access and exploitation. Immediate action is recommended for any entities relying on this software for website management.

CVE
CVE-2026-74011
Severity
HIGH
CVSS
7.6
EPSS
0.23%

Original NVD Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in revmakx InfiniteWP Client allows Blind SQL Injection. This issue affects InfiniteWP Client: from n/a through 1.13.9.