Critical · 9.3 CVE-2026-56034 EUVD-2026-39697GHSA-w65g-p34c-w77g

WordPress Library Management System plugin <= 3.5.7 - SQL Injection vulnerability

Published Jun 26, 2026 · Updated Jun 29, 2026 · Assigned by Patchstack

Vendor: Online Web Tutor Product: Library Management System

Description

Unauthenticated SQL Injection in Library Management System <= 3.5.7 versions.

Affected products

Vendor	Product	Affected	Fixed
Online Web Tutor	Library Management System	≤ 3.5.7	—

References

https://patchstack.com/database/wordpress/plugin/library-management-system/vulnerability/wordpress-library-management-system-plugin-3-5-7-sql-injection-vulnerability?_s_id=cve vdb-entry