CVE-2026-22193 - Vulnerability Analysis

Overview

wpDiscuz before 7.6.47 contains an sql injection caused by lack of proper quote escaping in getAllSubscriptions() function parameters, letting attackers manipulate database queries and extract sensitive information, exploit requires crafted input.

Severity & Score

Impact

Attackers can extract sensitive information by manipulating database queries via SQL injection.

Mitigation

Update to version 7.6.47 or later.

References

• https://wordpress.org/plugins/wpdiscuz/
• https://wordpress.org/plugins/wpdiscuz/#developers
• https://www.vulncheck.com/advisories/wpdiscuz-before-sql-injection-in-getallsubscriptions

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 14, 2026

🟠 CVE-2026-22193 - High (8.1) wpDiscuz before 7.6.47 contains an SQL injection vulnerability in the getAllSubscriptions() function where string parameters lack proper quote escaping in SQL queries. Attackers can inject malicious SQL code through email, activation_key, subscrip... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-22193/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner