CYBERHAWK / CVE / CVE-2026-4060

CVE-2026-4060

Geo Mashup WordPress Plugin

HIGH CVSS 7.5 vibe oss

The flaw

Time-based SQL injection via sort parameter in ORDER BY clause allowing database access.

What to do

Update to version after 1.13.18

▸ Scan my repo for CVE-2026-4060

References

First seen 2026-05-08 · Tracked by PickBits CyberHawk · Weekly CVE digest