6.5
/ 10
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Description
The OttoKit: All-in-One Automation Platform WordPress plugin before 1.1.23 does not properly sanitize user input before using it in a SQL statement, which could allow unauthenticated attackers to perform SQL injection attacks.
Basic Information
ID
CVE-2026-4935
Source
WPScan
Published
May 8, 2026 at 06:00
Modified
May 8, 2026 at 13:50
Affected Product
Vendor
Unknown
Product
OttoKit: All-in-One Automation Platform
Affected Versions
Unknown OttoKit: All-in-One Automation Platform 0