Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-08-03 | 2 | Disclosure2 |
| 2026-08-05 | 1 | Disclosure1 |
CVE-2026-12965 The Super Store Finder WordPress plugin through 7.8 does not sanitize a parameter of an unauthenticated AJAX action before using it in a SQL query, allowing unauthent… https://www.cve.org/CVERecord?id=CVE-2026-12965
Post summary
The text announces a new CVE (CVE-2026-12965) reporting that the Super Store Finder WordPress plugin is vulnerable to SQL injection due to unsanitized input in an unauthenticated AJAX action.
🚨 Critical unauthenticated SQL injection in the WordPress plugin Super Store Finder (≤7.8). CVE-2026-12965, CVSS 9.1 — attackers can dump your entire database. No official fix yet. Check & disable now. Anyone embedding a store or dealer map on their WordPress website via the "Super Store Finder" plugin currently has a serious problem: All versions up to and including 7.8 contain a critical security vulnerability that allows attackers to read your website's entire database without any authentication whatsoever – including usernames, email addresses, hashed passwords and customer data. The vulnerability carries the identifier CVE-2026-12965 and has been rated with a CVSS score of 9.1 out of 10. And worst of all: there is no official patch from the vendor so far. https://shieldgaps.com/en/news/cve-2026-12965-critical-sql-injection-in-super-store-finder-for-wordpress-176 #WordPress #Cybersecurity
Post summary
A critical unauthenticated SQL injection (CVE-2026-12965) is disclosed for Super Store Finder up to version 7.8, enabling full database read; no patch is available yet.
🚨*CVE* CVE-2026-12965 The Super Store Finder WordPress plugin through 7.8 does not sanitize a parameter of an unauthenticated AJAX action before using it in a SQL query, allowing unauthent… https://www.cve.org/CVERecord?id=CVE-2026-12965 ----- Traducción: CVE-2026-12965 El … http://infoflow.cloud`
Post summary
The tweet announces CVE-2026-12965, detailing an SQL injection in the Super Store Finder WordPress plugin, but does not provide a PoC, exploit code, patch, or exploitation report.