CVE-2026-12877
Software Issue Manager < 5.1.0 - Unauthenticated SQL Injection via Search Parameter
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The Project Management, Bug and Issue Tracking Plugin WordPress plugin before 5.1.0 does not sanitise and escape user supplied input before using it in a SQL query, allowing unauthenticated attackers to perform SQL injection attacks. This is exploitable in the Project Management, Bug and Issue Tracking Plugin WordPress plugin before 5.1.0's standard front-end issue-tracker configuration.
| Vendor | unknown |
| Product | project management, bug and issue tracking plugin |
| Published | Jul 24, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown project management, bug and issue tracking plugin
Be the first to know when new unknown vulnerabilities affecting unknown project management, bug and issue tracking plugin are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Project Management, Bug and Issue Tracking Plugin
0 < 5.1.0
References
Credits
Mokksh Parekh WPScan