CVE-2026-42713: WordPress Post title marquee scroll plugin <= 9.9 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Gopiplus Post title marquee scroll post-title-marquee-scroll allows Blind SQL Injection.This issue affects Post title marquee scroll: from n/a through 9.9.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
WordPress sites using the Gopiplus Post title marquee scroll plugin are affected if the installed version is 9.9 or earlier. The available information does not identify a lower unaffected version.
What does an attacker need to exploit it?
An attacker needs network access and high privileges. Exploitation is rated low complexity and does not require user interaction.
What is the potential impact?
The vulnerability enables blind SQL injection and is rated as having high confidentiality impact and low availability impact. No integrity impact is indicated by the provided vector.