{"id":"CVE-2026-81420","published":"2026-10-11T07:17:24.593","lastModified":"2026-10-13T20:36:00.850","description":"The Tcard WP WordPress plugin through 1.8.0 does not sanitise and escape a parameter before using it in a SQL statement in one of its unauthenticated AJAX actions, allowing unauthenticated users to perform SQL injection attacks.","cvssScore":8.6,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","cwes":["CWE-89"],"vendors":[],"products":[],"references":[{"url":"https://wpscan.com/vulnerability/cedd2a79-a718-4398-8df4-786b3b585090/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The Tcard WP WordPress plugin has a SQL injection vulnerability in its unauthenticated AJAX actions that allows attackers to execute arbitrary SQL commands without needing authentication. This is particularly dangerous because it affects unauthenticated users and can lead to data exposure or manipulation.","exploitability":"Exploitation is relatively straightforward as it requires no authentication and leverages an existing AJAX endpoint, though it may require some reconnaissance to identify the vulnerable parameter.","blast_radius":"If exploited, this vulnerability could allow attackers to extract sensitive data from the WordPress database, potentially including user credentials, posts, or other critical information, affecting all sites running the vulnerable plugin version.","remediation":"Upgrade to version 1.8.1 or later which contains the fix for the SQL injection vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["sql-injection","wordpress","web"],"model":"garnet-coder","analyzedAt":"2026-10-18T10:06:47.023Z"}}