{"id":"CVE-2026-89236","published":"2026-10-03T06:16:45.270","lastModified":"2026-10-06T15:18:12.170","description":"The SaveTo Wishlist Lite  WordPress plugin before 1.1.5 does not sanitise and escape parameters before using them in the ORDER BY clause of a SQL query, allowing unauthenticated attackers to append additional SQL queries and extract sensitive information from the database.","cvssScore":8.6,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","cwes":["CWE-89"],"vendors":[],"products":[],"references":[{"url":"https://wpscan.com/vulnerability/7b92ed60-7bcb-4dcf-8c57-0afcaa6809b7/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The flaw lies in the SaveTo Wishlist Lite WordPress plugin, which fails to properly sanitize parameters used in SQL queries, allowing unauthenticated attackers to inject additional SQL commands and potentially extract sensitive data.","exploitability":"Exploitation is relatively straightforward as it requires no authentication and can be executed by appending malicious SQL commands to the query parameters.","blast_radius":"If exploited, the impact could be significant, as it allows attackers to extract sensitive information from the database, potentially leading to data breaches.","remediation":"Upgrade to version 1.1.5 or later of the SaveTo Wishlist Lite plugin.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["sql-injection","web","data-exposure"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-04T08:41:26.247Z"}}