CVE WATCH / VULNERABILITY DETAIL
CVE-2026-116750
MEDIUMCVSS 6.5NVD feed
Published 28 October 2026 · tracked since 29 October 2026
Description
The VikRentCar Car Rental Management System plugin for WordPress is vulnerable to blind SQL Injection via the 'catid' parameter in all versions up to, and including, 1.4.10 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2025-30414 HIGH 7.1
- CVE-2026-92797 HIGH 8.8
- CVE-2026-101935 MEDIUM 6.1
- CVE-2026-76780 MEDIUM 6.3
- CVE-2026-77188 MEDIUM 6.4
- CVE-2026-77871 MEDIUM 6.4
- CVE-2026-92098 MEDIUM 6.1
- CVE-2026-76005 MEDIUM 6.5
- CVE-2026-118164 MEDIUM 6.4
- CVE-2026-116609 MEDIUM 6.5