Readabler Plugin - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/readabler-plugin/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioTue, 25 Aug 2026 12:08:17 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgSQL Injection in Readabler Plugin for WordPresshttps://feed.craftedsignal.io/briefs/2026-08-readabler-sqli/Tue, 25 Aug 2026 12:08:17 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-08-readabler-sqli/The Readabler WordPress plugin is vulnerable to unauthenticated SQL injection in versions prior to 2.0.18, allowing remote attackers to extract sensitive database content.The Readabler plugin for WordPress contains an unauthenticated SQL injection vulnerability (CVE-2026-78576) affecting all versions prior to 2.0.18. The flaw exists due to improper input sanitization and a lack of parameterized queries when handling user-supplied parameters. Because the vulnerability is reachable without authentication, remote, unauthenticated attackers can manipulate SQL queries executed by the application. Successful exploitation enables the exfiltration of sensitive information from the site's database, posing a high risk to data confidentiality. Organizations utilizing the Readabler plugin are advised to verify their installed version and upgrade to 2.0.18 or higher to remediate this vulnerability.

Impact

Successful exploitation allows unauthenticated attackers to perform SQL injection attacks, leading to unauthorized access to sensitive database information. This may include user credentials, configuration details, or other private data stored within the WordPress database. Given the ubiquity of WordPress installations, this vulnerability represents a significant risk for organizations managing public-facing web infrastructure.

Recommendation

  • Update the Readabler plugin for WordPress to version 2.0.18 or later immediately.
  • Audit web server access logs for anomalous HTTP requests containing SQL keywords (e.g., SELECT, UNION, SLEEP) targeting WordPress plugin endpoints.
  • Deploy the Sigma rule provided below to monitor for potential SQL injection patterns targeting web applications.
]]>highadvisory