CVE-2026-89216 - vTables < 0.3 - Unauthenticated SQL Injection via orderby Parameter
CVE ID :CVE-2026-89216 Published : Oct. 29, 2026, 6:17 a.m. | 6 hours, 7 minutes ago Description :The vTables WordPress plugin before 0.3 does not properly sanitise and escape a parameter before using it in a SQL statement, which allows unauthenticated attackers to perform SQL injection...