Vendor

JetEngine

1 brief RSS

JetEngine WordPress Plugin SQL Injection Vulnerability (CVE-2026-4352)

The JetEngine plugin for WordPress is vulnerable to SQL Injection via the Custom Content Type (CCT) REST API search endpoint, allowing unauthenticated attackers to extract sensitive database information.

JetEngine plugin sqli wordpress jetengine cve-2026-4352 web-application

2r 1t 1c Jan 30, 2024