CVE WATCH / VULNERABILITY DETAIL
CVE-2026-89285
HIGHCVSS 8.6NVD feed
Published 11 October 2026 · tracked since 12 October 2026
Description
The Datalist it WordPress plugin through 0.0.3 does not sanitize and escape several request parameters before using them to build a SQL query, allowing unauthenticated attackers to perform SQL injection and read arbitrary data from the database.
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-108753 CRITICAL 9.4
- CVE-2026-96227 HIGH 8.8
- CVE-2026-89232 HIGH 8.6
- CVE-2026-89234 HIGH 8.6
- CVE-2026-89283 HIGH 8.6
- CVE-2026-89287 HIGH 8.6
- CVE-2026-89297 HIGH 8.6
- CVE-2026-88826 HIGH 8.8
- CVE-2026-88827 HIGH 8.8
- CVE-2026-88903 HIGH 8.8