Unrated severityNVD Advisory· Published Oct 16, 2026

CVE-2026-103696

Description

The Mobile builder WordPress plugin through 1.4.2 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks on sites that also run the WCFM Delivery add-on.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Mobile Builderllm-fuzzy
Range: <=1.4.2
Package: https://wordpress.org/plugins/mobile-builder

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/3f3df5b4-bcb0-4d18-bd5d-88ce5582cd47/nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000