What is CVE-2026-15906?
This CVE identifies an SQL Injection vulnerability in the Premium Packages plugin for WordPress via the 'orderby' parameter. All versions up to and including 7.0.4 are affected. Users should update the plugin to the latest version immediately.
Azərbaycanca: Bu CVE, WordPress-in Premium Packages plaginində 'orderby' parametri vasitəsilə SQL Injection zəifliyidir. 7.0.4 və daha əvvəlki versiyaları təsir edir. İstifadəçilər dərhal plaqini son versiyaya yeniləməlidir.
Related CVEs
link basis: same weakness class CWE-89
FAQ2
Which WordPress plugin is affected by the CVE-2026-15906 vulnerability?
This vulnerability affects the Premium Packages plugin.
Which versions of the Premium Packages plugin are susceptible to the CVE-2026-15906 SQL Injection vulnerability?
All versions up to and including 7.0.4 are susceptible to this vulnerability.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.