CVE-2026-84047 — Album Cover Finder <= 0.7.0 - Unauthenticated SQLi via and_action

CVE-2026-84047

Album Cover Finder <= 0.7.0 - Unauthenticated SQLi via and_action PUBLISHED

Description (CNA)

The Album Cover Finder WordPress plugin through 0.7.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks.

Affected (CNA)

Vendor / product	Versions
Unknown / Album Cover Finder	affected 0 through 0.7.0

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/eebacbae-4b25-45b5-96d9-f5ba28dfd825/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.