CVE-2026-104122

CVE-2026-104122CVE-2026-104122

Description

The Ukr-To-Lat WordPress plugin through 1.3.5 does not sanitize and escape a term name before using it in a SQL query, allowing users with Contributor-level access and above to perform SQL injection attacks.

Scoring

Last modified2026-10-17
Sourced from NVD. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.