UNKNOWN NVD

CVE-2026-88926

The VikRentItems Flexible Rental Management System WordPress plugin before 1.2.4 does not sanitise and escape some of its parameters before using them in SQL st

The VikRentItems Flexible Rental Management System WordPress plugin before 1.2.4 does not sanitise and escape some of its parameters before using them in SQL statements, allowing unauthenticated users to perform SQL injection attacks.

References

https://wpscan.com/vulnerability/da39827b-f087-48f3-baa9-759709a3767e/

Published: 2026-09-19 · Source: NVD · Feed updated: 2026-09-19

This unknown severity vulnerability was published on 2026-09-19 via NVD.

vulnfeed aggregates 14156 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.