CVE-2026-91074

— UNSCORED

Published 2026-10-17 · Updated 2026-10-17

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

The BSK PDF Manager WordPress plugin through 3.8.1 does not properly sanitise and escape a parameter before using it in a SQL statement, which could allow authenticated users with contributor-level access and above to perform SQL injection attacks and read sensitive data such as administrator password hashes from the database.

All references

https://wpscan.com/vulnerability/e33c7673-2e31-4f0f-9e29-c65a6b4944a5/

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.