UNKNOWNCVSS not yet scoredVulnerability
CVE-2026-107786
The CatFolders WordPress plugin before 2.5.7 does not properly sanitize and escape a user-controlled sort setting before using it in a SQL query, allowing authenticated users with upload capability (Author and above) to perform SQL injection attacks.
Properties
- Last source
- NVD
- Nvd fetched at
- 2026-11-05T09:55:40.753360+00:00
- Cve id
- CVE-2026-107786
- First seen by Signal
- 2026-11-05T09:52:06+00:00
- Retrieved at
- 2026-11-05T09:57:20+00:00
- Published at
- 2026-11-05T06:17:07.343
- Last modified
- 2026-11-05T06:17:07.343
Explore deeper with Ninja Signal's threat intelligence graph