Skip to content
Threat Feed
Subscribe

Tag

Cve-2026-120043

1 brief RSS
high advisory

SliceWP Affiliates: SQL injection in email parameter (CVE-2026-120043)

An unauthenticated SQL injection vulnerability in SliceWP Affiliates versions 1.2.14 and earlier allows remote attackers to extract sensitive database information via the email parameter during WooCommerce registration.

SliceWP Affiliates wordpress sql-injection web-application cve-2026-120043
1t 1c