Skip to content
OpenAdvisories
Critical · 9.3 CVE-2026-112860 EUVD-2026-108630GHSA-pvv6-j57p-h6cv

WordPress Participants Database plugin <= 2.7.8.5 - SQL Injection vulnerability

Published Oct 23, 2026 · Updated Oct 23, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in xnau webdesign Participants Database participants-database allows Blind SQL Injection.This issue affects Participants Database: from n/a through 2.7.8.5.

Affected products

VendorProductAffectedFixed
xnau webdesign Participants Database ≤ 2.7.8.5 —

References