CVE-2026-8163 — Infility Global < 2.15.19 - Subscriber+ SQL Injection via order Parameter

CVE-2026-8163

Infility Global < 2.15.19 - Subscriber+ SQL Injection via order Parameter PUBLISHED

Description (CNA)

The Infility Global WordPress plugin before 2.15.19 does not properly sanitize and escape some parameters before using them in SQL statements, leading to a SQL Injection vulnerability exploitable by authenticated users with Subscriber-level access and above.

Affected (CNA)

Vendor / product	Versions
Unknown / Infility Global	affected 0 before 2.15.19

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/e471516a-6f43-4a89-8486-7a638845e197/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.