UNKNOWNCVSS not yet scoredVulnerability
CVE-2026-115281
The Recipe Card Blocks Lite WordPress plugin before 3.6.4 does not sanitize and cast a block and shortcode attribute before concatenating it into SQL queries, allowing authenticated users with Contributor-level access or above to perform SQL injection attacks.
Properties
- Last source
- NVD
- Nvd fetched at
- 2026-10-28T07:36:37.585298+00:00
- Cve id
- CVE-2026-115281
- First seen by Signal
- 2026-10-28T07:37:41+00:00
- Retrieved at
- 2026-10-28T07:37:41+00:00
- Published at
- 2026-10-28T06:16:35.930
- Last modified
- 2026-10-28T06:16:35.930
Explore deeper with Ninja Signal's threat intelligence graph