CVE-2026-73998

The vulnerability allows for SQL injection in the Subscriber feature of WP w3all phpBB versions up to 3.0.5, potentially enabling attackers to manipulate database queries and gain unauthorized access to sensitive data. Organizations using affected phpBB versions should prioritize patching this vulnerability to mitigate the risk of data breaches and unauthorized system access. Immediate action is recommended for those managing web applications that rely on this software.