CVE-2026-62071

WordPress versions up to 5.1.10 are vulnerable to an unauthenticated SQL injection flaw in the file upload functionality, allowing attackers to execute arbitrary SQL queries and potentially gain unauthorized access to sensitive data. This critical vulnerability, with a CVSS score of 9.3, poses a significant risk to websites using these versions, making it imperative for administrators to prioritize immediate updates to mitigate potential exploitation. All WordPress site owners and developers should address this issue promptly to safeguard their systems.