VulnSocial

CVE-2026-94117Active Exploitation

MEDIUMCVSS 7.6 · HIGH

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

  • Patch affected systems immediately
  • Assume compromise if assets are exposed

Recommended action window: Immediate (within 24h)

NVD description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in DevItems HashBar – WordPress Notification Bar allows Blind SQL Injection. This issue affects HashBar – WordPress Notification Bar: from n/a through 2.0.3.

Back to dashboard
4.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-89

Priority

MEDIUM

Exploitation

ACTIVE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Active exploitation appears in 1 classified signals
  • Patch or workaround signal is available
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Active exploitation reported across 1 signal
  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 3 signals
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 2 mentions (2026-09-22); latest day: 1
  • 3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-09-22: 2Mentions · 2026-09-29: 1Active Exploitation · 2026-09-22: 1Patch / Workaround · 2026-09-22: 1Patch / Workaround · 2026-09-29: 1Technical Details · 2026-09-22: 2Technical Details · 2026-09-29: 109-2209-29
Signal classification3 categories
Active Exploitation
133.3%
Disclosure
133.3%
Patch
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-09-222
Active Exploitation1Disclosure1
2026-09-291
Patch1
Full discourse3 posts
  • Hugo | DevOps | Cybersecurity 🇱🇻@HugoValters
    Patch

    CVE-2026-94117: Blind SQL injection in DevItems HashBar WordPress plugin through 2.0.3. CVSS 7.6, no patch yet. If you run it, disable or remove now. https://www.valtersit.com/cve/CVE-2026-94117/ #CVE #WordPress #infosec #DevItems #CVEALERT #CVE #infosec #Linux #XSS #valtersit #snippet #SysAdmin #cybersecurity #devsecops #devops #developer #100daysofcode #git #github #gitlab #redteam #blueteam #ethicalhacker #cybersecurityawareness #cybersecuritynews #cybersecuritytips #python #hacker #kali #ubuntu #debian #docker

    Post summary

    The tweet reports CVE‑2026‑94117, a blind SQL injection in the DevItems HashBar WordPress plugin (≤2.0.3) with CVSS 7.6 and no patch, urging users to disable or remove the plugin as a mitigation.

    0000040
    1.1K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-94117 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in DevItems HashBar – WordPress Notification Bar allows Blind SQL I… https://www.cve.org/CVERecord?id=CVE-2026-94117

    Post summary

    The text discloses CVE-2026-94117 as a Blind SQL Injection vulnerability in the DevItems HashBar WordPress plugin, linking to the official CVE record, with no exploit code, patch, or active exploitation details provided.

    00000926
    58.1K followersView on X
  • PJ@Npj8448
    Active Exploitation

    🚨 Windows Defender zero-day blocks AV updates (released by Abdelhamid Naceri) while North Korean group WaterPlum uses AI face-swapping in fake job interviews to infect 30k+ devices and drain crypto wallets. Patch WordPress CVE-2026-94117 & CVE-2026-18345. https://pranithjain.qzz.io/threatintel/telegram?tab=firehose

    Post summary

    The text reports active exploitation by North Korean group WaterPlum (AI face-swapping in fake interviews) alongside a Windows Defender zero-day and urges patching two WordPress CVEs, but details are light and sourced from an external aggregator.

    00000148
    79 followersView on X

Explore more

Back to dashboard