CVE-2026-89216

{
  "etk_id": "ETK-2026-2951",
  "cve_id": "CVE-2026-89216",
  "display_id": "CVE-2026-89216",
  "ghsa_id": "GHSA-445v-r4g3-586w",
  "euvd_id": "EUVD-2026-112615",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Unauthenticated SQL injection in vTables",
  "summary": "vTables WordPress plugin versions before 0.3 are affected by an SQL injection vulnerability. An unauthenticated remote attacker may be able to access data from the site's database through the vulnerable plugin.",
  "mitigation": "Update the vTables WordPress plugin to version 0.3 or later. Restrict public access to affected WordPress sites until the update is installed.",
  "vendor": null,
  "product": "vTables",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0, < 0.3"
      ],
      "ecosystem": null,
      "fixed_versions": [
        "0.3"
      ],
      "package_name": "vTables",
      "purl": null
    }
  ],
  "cwes": null,
  "cvss_score": null,
  "cvss_src": null,
  "cvss_vector": null,
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "deterministic",
  "check": true,
  "check_confidence_basis": "differential",
  "exploit": false,
  "pipeline_minutes": 25.682909183333333,
  "t0_at": "2026-10-29T06:00:23.322000+00:00",
  "signals": {
    "check": {
      "at": "2026-10-29T08:46:19.010143+00:00",
      "days": 0.11522787202546296,
      "is_lower_bound": false,
      "measured_at": "2026-10-29T06:00:23.322000+00:00",
      "url": null
    },
    "trigger_signal": {
      "at": "2026-10-29T06:00:23.322000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-29T06:00:23.322000+00:00",
      "url": "https://github.com/advisories/GHSA-445v-r4g3-586w"
    }
  }
}