Skip to content
OpenAdvisories

Vendor

minnpost

1 known vulnerabilities.

Products

Object Sync for Salesforce 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-15162

    Object Sync for Salesforce <= 2.2.13 - Unauthenticated SQL Injection

    The Object Sync for Salesforce plugin is vulnerable to unauthenticated SQL Injection via the wordpress_object_type parameter of its /wp-json/object-sync-for-salesforce/push/ REST route. The route's permission callback (can_process()) checks only the HTTP meth…

    minnpost Object Sync for Salesforce