CVE-2026-89213 — Llavero.io <= 0.1.4 - Unauthenticated Blind SQLi via 'cill_login' Parameter

CVE-2026-89213

Llavero.io <= 0.1.4 - Unauthenticated Blind SQLi via 'cill_login' Parameter PUBLISHED

Description (CNA)

The Llavero.io WordPress plugin through 0.1.4 does not properly sanitise and escape a parameter before using it in a SQL statement, which allows unauthenticated attackers to perform SQL injection attacks and read data from the database.

Affected (CNA)

Vendor / product	Versions
Unknown / Llavero.io	affected 0 through 0.1.4

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/3f190943-997c-4b94-b760-51532b61427f/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.