CVE-2026-15361 — Content Views < 4.5 - Subscriber+ SQL Injection via preview_request

CVE-2026-15361

Content Views < 4.5 - Subscriber+ SQL Injection via preview_request PUBLISHED

Description (CNA)

The Content Views WordPress plugin before 4.5 does not perform a capability check on one of its AJAX actions and does not properly sanitise attacker-supplied data before using it in a SQL query, allowing any authenticated user, including Subscribers, to perform SQL injection attacks.

Affected (CNA)

Vendor / product	Versions
Unknown / Content Views	affected 0 before 4.5

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/3fa62b23-a0a7-4b42-b8dd-0eb6e01972b2/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.