High severity7.6NVD Advisory· Published Aug 20, 2026

CVE-2026-74011

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in revmakx InfiniteWP Client allows Blind SQL Injection.

This issue affects InfiniteWP Client: from n/a through 1.13.9.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/InfiniteWP Clientllm-fuzzy
Range: <=1.13.9

Patches

Vulnerability mechanics

References

patchstack.com/database/wordpress/plugin/iwp-client/vulnerability/wordpress-infinitewp-client-plugin-1-13-9-sql-injection-vulnerabilitynvd

News mentions

WordPress: 25 Plugin Vulnerabilities Disclosed in Single-Hour Batch
Vypr Intelligence · Aug 20, 2026

cvss	0.494
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000