SEPTEMBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-57707

CRITICAL · CVSS 9.3 EPSS 0.28%

Source: NVD + CISA KEV + EPSS · Published 2026-07-13 · Last synced 2026-08-12

CyberRota Analysis

AI-Generated

The Simple Business Directory Pro plugin is vulnerable to SQL Injection due to improper neutralization of special elements in SQL commands, allowing attackers to manipulate database queries. This critical vulnerability could lead to unauthorized access to sensitive data or complete database compromise. Organizations using affected versions of this plugin should prioritize immediate remediation to mitigate potential data breaches.

CVE
CVE-2026-57707
Severity
CRITICAL
CVSS
9.3
EPSS
0.28%

Original NVD Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in quantumcloud Simple Business Directory Pro simple-business-directory-pro allows SQL Injection.This issue affects Simple Business Directory Pro: from n/a through <= 15.9.4.