CVE-2026-81800: WordPress Verified Reviews (Avis Vérifiés) plugin <= 2.4.6 - SQL Injection vulnerability
Published Sep 10, 2026
·Updated
Unauthenticated SQL Injection in Verified Reviews (Avis Vérifiés) <= 2.4.6 versions.
Affected Software
1 affected component
WordPress Verified Reviews (Avis Vérifiés)<=2.4.6
Event History
Sep 10, 2026
CVE Published
via MITRE·02:23 PM
Data Sourced
via MITRE·02:23 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
The vulnerability is unauthenticated, so an attacker does not need a WordPress account or other prior privileges. The CVSS vector indicates it can be exploited over the network with low attack complexity and no user interaction.
2
Which installations are affected?
Verified Reviews (Avis Vérifiés) plugin versions 2.4.6 and earlier are affected. The provided information does not identify any configuration prerequisite or workaround.
3
What is the potential impact?
The vulnerability can allow SQL injection, with high confidentiality impact and low availability impact according to the supplied severity vector. The vector indicates no integrity impact.