CVE-2026-93904

{
  "etk_id": "ETK-2026-2935",
  "cve_id": "CVE-2026-93904",
  "display_id": "CVE-2026-93904",
  "ghsa_id": null,
  "euvd_id": "EUVD-2026-112588",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Unauthenticated SQL injection in Social Web Suite",
  "summary": "Social Web Suite – Social Media Auto Post, Social Media Auto Publish for WordPress is affected through version 4.1.12. An unauthenticated attacker may read sensitive database information by abusing the SQL query handling when the plugin is freshly activated and its settings have not yet been visited.",
  "mitigation": "Disable the plugin or restrict access to the affected endpoint until a vendor update is available. For newly activated installations that must remain enabled, visit and save the plugin settings to initialize its secret key, while treating this as exposure reduction rather than a complete fix.",
  "vendor": "dejanmarkovic",
  "product": "Social Web Suite – Social Media Auto Post, Social Media Auto Publish",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0, <= 4.1.12"
      ],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "Social Web Suite – Social Media Auto Post, Social Media Auto Publish",
      "purl": null
    }
  ],
  "cwes": [
    89
  ],
  "cvss_score": 7.5,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "deterministic",
  "check": true,
  "check_confidence_basis": "upstream",
  "exploit": false,
  "pipeline_minutes": 0.2754497833333333,
  "t0_at": "2026-10-29T03:39:14.706000+00:00",
  "signals": {
    "check": {
      "at": "2026-10-29T04:02:45.634202+00:00",
      "days": 0.01633018752314815,
      "is_lower_bound": false,
      "measured_at": "2026-10-29T03:39:14.706000+00:00",
      "url": null
    },
    "trigger_signal": {
      "at": "2026-10-29T03:39:14.706000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-29T03:39:14.706000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-93904"
    }
  }
}