CVE-2026-88926

The VikRentItems Flexible Rental Management System WordPress plugin before 1.2.4 does not sanitise and escape some of its parameters before…

WPScan·Published 2026-09-19

CVSS

—

EPSS

—

KEV

Exploits

cve.orgen

234 chars

The VikRentItems Flexible Rental Management System WordPress plugin before 1.2.4 does not sanitise and escape some of its parameters before using them in SQL statements, allowing unauthenticated users to perform SQL injection attacks.

NVDen

234 chars