High · 8.5 CVE-2026-95610 EUVD-2026-95596GHSA-c4q9-w4vh-p5h8

WordPress UpSolution Core plugin <= 9.3 - SQL Injection vulnerability

Published Oct 9, 2026 · Updated Oct 27, 2026 · Assigned by Patchstack

Vendor: UpSolution Product: UpSolution Core

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in UpSolution UpSolution Core us-core allows Blind SQL Injection.This issue affects UpSolution Core: from n/a through 9.3.

Affected products

Vendor	Product	Affected	Fixed
UpSolution	UpSolution Core	≤ 9.3	—

References

https://patchstack.com/database/wordpress/plugin/us-core/vulnerability/wordpress-upsolution-core-plugin-9-3-sql-injection-vulnerability?_s_id=cve vdb-entry