Unrated severityNVD Advisory· Published Oct 28, 2026
CVE-2026-104694
CVE-2026-104694
Description
The Thrive Automator WordPress plugin before 11.2 does not properly sanitize and escape a parameter's array key before using it in a SQL query, allowing authenticated attackers with editor-level access to perform blind SQL injection attacks.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <11.2
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.