CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 8.1. It involves a SQL injection risk.
CVE
CVE-2026-22193
Severity
HIGH
CVSS
8.1
EPSS
0.30%
Original NVD Description
wpDiscuz before 7.6.47 contains an SQL injection vulnerability in the getAllSubscriptions() function where string parameters lack proper quote escaping in SQL queries. Attackers can inject malicious SQL code through email, activation_key, subscription_date, and imported_from parameters to manipulate database queries and extract sensitive information.
Related CVEs
Other vulnerabilities affecting the same vendor(s)