CVE-2026-88926 — VikRentItems Flexible Rental Management System < 1.2.4 - Unauthenticated SQLi

CVE-2026-88926

VikRentItems Flexible Rental Management System < 1.2.4 - Unauthenticated SQLi PUBLISHED

Description (CNA)

The VikRentItems Flexible Rental Management System WordPress plugin before 1.2.4 does not sanitise and escape some of its parameters before using them in SQL statements, allowing unauthenticated users to perform SQL injection attacks.

Affected (CNA)

Vendor / product	Versions
Unknown / VikRentItems Flexible Rental Management System	affected 0 before 1.2.4

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/da39827b-f087-48f3-baa9-759709a3767e/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.