Question 1

What is CVE-2026-13596 — CVE-2026-13596?

Accepted Answer

The Participants Database WordPress plugin before 2.7.8.4 does not properly sanitize and escape a user-supplied parameter before using it in a SQL query, allowing unauthenticated attackers to perform SQL injection attacks.

Question 2

What is the authoritative source for CVE-2026-13596?

Accepted Answer

CVE-2026-13596 (CVE-2026-13596) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-13596CVE-2026-13596

Description

Scoring