CVE-2026-108179: WordPress WOLF plugin <= 1.1.1 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PluginUs.Net WOLF bulk-editor allows Blind SQL Injection.This issue affects WOLF: from n/a through 1.1.1.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress WOLF pluginto a version that resolves this vulnerability.Fixed in 1.1.2
Event History
Frequently Asked Questions
What level of access does an attacker need to exploit this issue?
The CVSS vector indicates that an attacker needs high privileges. The attack can be performed remotely and does not require user interaction.
What impact could successful exploitation have?
Successful blind SQL injection could expose confidential information and cause limited availability impact. The CVSS vector indicates no integrity impact.
Which WOLF versions are affected?
The issue affects PluginUs.Net WOLF through version 1.1.1. The provided data does not identify a fixed version.
Is a default installation affected?
The provided data does not state whether the vulnerable functionality is enabled or reachable in the default configuration.