CVE-2026-4079

6.5 mediumEPSS 0.2%

Medium (6.5) in guaven sql chart builder. EPSS 0.2% chance of exploitation in the next 30 days.

The SQL Chart Builder WordPress plugin before 2.3.8 does not properly escape user input as it is concatened to SQL queries, making it possible for attackers to conduct SQL Injection attacks against the dynamic filter functionality.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 8% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2026-04-07
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

guaven:sql_chart_builder

References

https://wpscan.com/vulnerability/8ec92881-4ae5-458d-995b-f097f2bcc590/

Check your stack JSON