{"id":"CVE-2026-16949","aliases":["EUVD-2026-55015"],"status":"published","title":"Term Pages \u003c 2.0.0 - Unauthenticated SQL Injection via tp_lookup","description":"The Term Pages WordPress plugin before 2.0.0 does not properly sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated attackers to perform SQL injection attacks.","severity":{"version":"3.1","score":5.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-10","score":0.00353,"percentile":0.29325,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-89"],"published":"2026-08-10T06:00:15Z","modified":"2026-08-26T16:31:16Z","products":[{"vendor":"unknown","product":"term pages"}],"references":[{"url":"https://wpscan.com/vulnerability/3e07356a-5ac8-4d9f-bef2-65aaecbf1419/","tags":["exploit","vdb-entry","technical-description"]}],"sources":{"cve":[{"id":"CVE-2026-16949","title":"Term Pages \u003c 2.0.0 - Unauthenticated SQL Injection via tp_lookup","description":"The Term Pages WordPress plugin before 2.0.0 does not properly sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated attackers to perform SQL injection attacks.","status":"published","published":"2026-08-10T06:00:15.962Z","modified":"2026-08-11T20:39:32.563Z","cvss":[{"version":"3.1","score":5.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:20:10.870108Z"}],"euvd":[{"id":"EUVD-2026-55015","description":"The Term Pages WordPress plugin before 2.0.0 does not properly sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated attackers to perform SQL injection attacks.","status":"published","published":"2026-08-10T06:00:15Z","modified":"2026-08-11T20:39:32Z","cvss":[{"version":"3.1","score":5.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T18:01:59.11112Z"}],"nvd":[{"id":"CVE-2026-16949","description":"The Term Pages WordPress plugin before 2.0.0 does not properly sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated attackers to perform SQL injection attacks.","status":"published","published":"2026-08-10T07:16:48.273Z","modified":"2026-08-26T16:31:16.753Z","cvss":[{"version":"3.1","score":5.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:12:35.743275Z"}]}}