CVE-2026-110895: WordPress Support Genix plugin <= 1.4.54 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in DevItems Support Genix support-genix-lite allows SQL Injection.This issue affects Support Genix: from n/a through 1.4.54.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Support Genix pluginto a version that resolves this vulnerability.Fixed in 1.4.55
Event History
Frequently Asked Questions
Which installations are affected?
Support Genix versions through 1.4.54 are affected. The available data does not identify a lower unaffected version.
What level of access does an attacker need?
The vulnerability has a PR:L vector, indicating that an attacker needs low-level privileges before exploitation. It does not require user interaction and can be exploited over the network.
What is the potential impact of successful exploitation?
Successful SQL injection may expose confidential data and has a low availability impact. The CVSS vector indicates scope can change, while no direct integrity impact is indicated.