SEPTEMBER 18, 2026
Live Feed
Back to database
Case File

CVE-2026-78285

HIGH · CVSS 8.5 EPSS 0.34%

Source: NVD + CISA KEV + EPSS · Published 2026-08-27 · Last synced 2026-09-18

CyberRota Analysis

AI-Generated

A SQL injection vulnerability exists in the Like Button Rating plugin for versions up to 2.6.61, allowing attackers to execute arbitrary SQL queries, potentially leading to unauthorized data access or manipulation. Organizations using this plugin should prioritize remediation due to the high severity rating, as exploitation could compromise sensitive user data and overall system integrity. Immediate action is recommended for those managing web applications that utilize this plugin.

CVE
CVE-2026-78285
Severity
HIGH
CVSS
8.5
EPSS
0.34%

Original NVD Description

Subscriber SQL Injection in Like Button Rating <= 2.6.61 versions.