{"id":"CVE-2026-104122","published":"2026-10-17T06:16:33.237","lastModified":"2026-10-17T06:16:33.237","description":"The Ukr-To-Lat WordPress plugin through 1.3.5 does not sanitize and escape a term name before using it in a SQL query, allowing users with Contributor-level access and above to perform SQL injection attacks.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":[],"vendors":[],"products":[],"references":[{"url":"https://wpscan.com/vulnerability/01abcbf8-d256-49b9-b660-38c50506c441/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}