CVE-2026-96328: WordPress JNews - Pay Writer plugin <= 12.0.1 - SQL Injection vulnerability

Q: Which installations are affected?

JNews - Pay Writer versions through 12.0.1 are affected. The affected range begins at an unspecified earlier version.

Q: What access does an attacker need to exploit this issue?

The vector is network-based, with low attack complexity. Exploitation requires neither authentication nor user interaction.

Q: What is the potential impact?

The vulnerability permits blind SQL injection and is rated critical with a 9.3 severity score. It can result in high confidentiality impact and low availability impact, with no integrity impact indicated.

Published Oct 9, 2026

Updated

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in jegtheme JNews - Pay Writer jnews-pay-writer allows Blind SQL Injection.This issue affects JNews - Pay Writer: from n/a through 12.0.1.

Affected Software

1 affected component

Jegtheme JNews - Pay Writer<=12.0.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress JNews - Pay Writer to a version that resolves this vulnerability.
Fixed in 12.0.2

Event History

Oct 9, 2026

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

Which installations are affected?

JNews - Pay Writer versions through 12.0.1 are affected. The affected range begins at an unspecified earlier version.

What access does an attacker need to exploit this issue?

The vector is network-based, with low attack complexity. Exploitation requires neither authentication nor user interaction.

What is the potential impact?

The vulnerability permits blind SQL injection and is rated critical with a 9.3 severity score. It can result in high confidentiality impact and low availability impact, with no integrity impact indicated.

CVE-2026-96328: WordPress JNews - Pay Writer plugin <= 12.0.1 - SQL Injection vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Which installations are affected?

What access does an attacker need to exploit this issue?

What is the potential impact?

Company

Resources

Contact

Frequently Asked Questions

Which installations are affected?

What access does an attacker need to exploit this issue?

What is the potential impact?