CVE-2026-4079
SQL Chart Builder < 2.3.8 - Unauthenticated SQL Injection
CVSS Score
6.5
EPSS Score
0.0%
EPSS Percentile
6th
The SQL Chart Builder WordPress plugin before 2.3.8 does not properly escape user input as it is concatened to SQL queries, making it possible for attackers to conduct SQL Injection attacks against the dynamic filter functionality.
| Vendor | unknown |
| Product | sql chart builder |
| Published | Apr 7, 2026 |
| Last Updated | Apr 7, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown sql chart builder
Be the first to know when new medium vulnerabilities affecting unknown sql chart builder are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / SQL Chart Builder
0 < 2.3.8
References
Credits
dangnosuy WPScan