Skip to content
OpenAdvisories
Critical · 9.3 CVE-2026-96328 EUVD-2026-95607GHSA-qhfm-h7x3-vwc8

WordPress JNews - Pay Writer plugin <= 12.0.1 - SQL Injection vulnerability

Published Oct 9, 2026 · Updated Oct 9, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in jegtheme JNews - Pay Writer jnews-pay-writer allows Blind SQL Injection.This issue affects JNews - Pay Writer: from n/a through 12.0.1.

Affected products

VendorProductAffectedFixed
jegtheme JNews - Pay Writer ≤ 12.0.1 —

References