https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-30T15:55:35.194596+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-60137 CVE-2026-60137 — WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_Query 2026-09-30T15:55:35.210940+00:00

Affected: WordPress

WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the author__not_in parameter of WP_Query, which could allow SQL Injection when a plugin or theme passes untrusted input to the parameter.