CVE-2026-95610: WordPress UpSolution Core plugin <= 9.3 - SQL Injection vulnerability

Q: What does an attacker need to exploit this issue?

The CVSS vector indicates that exploitation is network-accessible, requires low privileges, and does not require user interaction. The attack complexity is rated low.

Q: What is the likely security impact?

The issue is rated high severity with high confidentiality impact and low availability impact. Integrity impact is rated none, and the vulnerability can affect resources beyond the initially vulnerable component's security scope.

Published Oct 9, 2026

Updated

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in UpSolution UpSolution Core us-core allows Blind SQL Injection.This issue affects UpSolution Core: from n/a through 9.3.

Affected Software

1 affected component

UpSolution UpSolution Core<=9.3

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress UpSolution Core plugin to a version that resolves this vulnerability.
Fixed in 9.3.1

Event History

Oct 9, 2026

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What does an attacker need to exploit this issue?

The CVSS vector indicates that exploitation is network-accessible, requires low privileges, and does not require user interaction. The attack complexity is rated low.

What is the likely security impact?

The issue is rated high severity with high confidentiality impact and low availability impact. Integrity impact is rated none, and the vulnerability can affect resources beyond the initially vulnerable component's security scope.

CVE-2026-95610: WordPress UpSolution Core plugin <= 9.3 - SQL Injection vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

What does an attacker need to exploit this issue?

What is the likely security impact?

Company

Resources

Contact

Frequently Asked Questions

What does an attacker need to exploit this issue?

What is the likely security impact?