Description
Subscriber SQL Injection in Tourfic <= 2.22.5 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Themefic | Tourfic | ≤ 2.22.5 | — |
High · 8.5
CVE-2026-56064
EUVD-2026-39718GHSA-89jf-r85v-p58j
WordPress Tourfic plugin <= 2.22.5 - SQL Injection vulnerability
Published Jun 26, 2026 · Updated Jun 26, 2026 · Assigned by Patchstack