CVE-2026-88930
Social Web Suite <= 4.1.12 - Unauthenticated Blind SQLi via Unset Shared Secret
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The Social Web Suite WordPress plugin through 4.1.12 does not require its shared secret to be set before accepting requests authorised by it, and does not sanitise and escape a parameter before using it in an SQL statement, allowing unauthenticated users to perform SQL injection attacks.
| Vendor | unknown |
| Product | social web suite |
| Published | Oct 11, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown social web suite
Be the first to know when new unknown vulnerabilities affecting unknown social web suite are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Social Web Suite
0 ≤ 4.1.12
References
Credits
Naoki Kawahigashi WPScan