← All advisories

Critical severity9.3NVD Advisory· Published Jun 25, 2026· Updated Jun 26, 2026

CVE-2026-54836

CVE-2026-54836

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YMC Filter allows SQL Injection.

This issue affects YMC Filter: from n/a through 3.11.5.

Affected products

1

WordPress/YMC Filterllm-fuzzy
Range: <=3.11.5

Patches

Vulnerability mechanics

References

1

patchstack.com/database/wordpress/plugin/ymc-smart-filter/vulnerability/wordpress-filter-grids-plugin-3-11-5-sql-injection-vulnerabilitynvd

News mentions

0

No linked articles in our index yet.