Security Advisory
CVE-2026-14189
3.8
LOW
Vulnerability Description
The WPBot WordPress plugin before 8.5.2 does not validate administrator-configured field identifiers before using them in a SQL query, allowing users with administrator access to perform SQL injection that executes when a visitor triggers a search.
Published Date
July 27, 2026
Official Source
NIST NVD Advisory