Skip to content
Threat Feed
Subscribe

Vendor

Social Web Suite

1 brief RSS
high advisory

Social Web Suite: SQL injection and authentication bypass (CVE-2026-93904)

The Social Web Suite WordPress plugin (up to 4.1.12) is vulnerable to unauthenticated SQL injection via the exclude_posts parameter and an authentication bypass due to insecure default HMAC secret key handling.

Social Media Auto Post, Social Media Auto Publish wordpress sqli authentication-bypass
1t 1c