一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年10月9日

CVE-2026-89235 [MEDIUM] – The Testimonials by BestWebSoft WordPress plugin through 1.0.8 does not sanitise and escap

未分类
📑 文章目录

The Testimonials by BestWebSoft WordPress plugin through 1.0.8 does not sanitise and escape a parameter before using it in a SQL query, allowing unauthenticated attackers to append additional SQL to the query.