Product

Object Sync for Salesforce

1 brief RSS

CVE-2026-15162: Unauthenticated SQL Injection in Object Sync for Salesforce Plugin

An unauthenticated SQL injection vulnerability in the Object Sync for Salesforce WordPress plugin allows remote attackers to execute arbitrary SQL queries via the REST API.

Object Sync for Salesforce web-vulnerability sql-injection wordpress cve-2026-15162

1r 1t 1c 1h ago