Skip to content
OpenAdvisories
High · 8.5 CVE-2026-121769 EUVD-2026-120147GHSA-79mw-px6v-qmhq

WordPress WP w3all phpBB plugin <= 3.1.9 - SQL Injection vulnerability

Published Nov 9, 2026 · Updated Nov 10, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in axew3.com WP w3all phpBB wp-w3all-phpbb-integration allows SQL Injection.This issue affects WP w3all phpBB: from n/a through 3.1.9.

Affected products

VendorProductAffectedFixed
axew3.com WP w3all phpBB ≤ 3.1.9 —

References