CVE-2026-111402

Summary

SQL injection flaw in Tribulant Newsletters Lite plugin (v4.18.1 and earlier) allows unauthenticated attackers to manipulate database queries via unsanitized user input.

Exploitability

Exploitation is straightforward for remote attackers due to lack of authentication, minimal complexity, and no user interaction required.

Blast radius

Successful exploitation could lead to full compromise of confidentiality (data exfiltration) and partial availability impact (e.g., denial-of-service via malformed queries), though integrity remains unaffected per CVSS.

Detection

Look for HTTP requests containing suspicious SQL patterns (e.g., UNION SELECT, OR 1=1) in query parameters targeting the newsletters-lite plugin endpoints; WAF logs or web server access logs may show such anomalies.

Prioritized remediation

Upgrade to Newsletters Lite version 4.18.2 or later, where the SQL injection vulnerability has been patched.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.