CVE-2026-1719 - Gravity Bookings <= 2.5.9 - Unauthenticated SQL Injection via 'category_id' Parameter
CVE ID :CVE-2026-1719 Published : May 6, 2026, 9:27 a.m. | 1 hour ago Description :The Gravity Bookings Premium plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 2.5.9 due to insufficient escaping on the user supplied parameter and lack of sufficient pre
ORIGINAL SOURCE →via CVE Feed Latest
ADVERTISEMENT
⚡ STAY AHEAD
Events like this, convergence-verified across 689 sources, land in your inbox every Sunday. Free.
GET THE SUNDAY BRIEFING →RELATED · cyber
- [CYBER] North Korean hackers targeted ethnic Koreans in China with Android ‘BirdCall’ malware
- [CYBER] From Stuxnet to ChatGPT: 20 News Events That Shaped Cyber
- [CYBER] CyberSecurity Nightmares
- [CYBER] CloudZ RAT Exploits Microsoft Phone Link to Steal SMS OTPs
- [CYBER] Apache fixes critical HTTP/2 double-free flaw CVE-2026-23918 enabling RCE
- [CYBER] KuCoin pone en marcha el Mes de Concientización sobre el Phishing para reforzar la protección de los usuarios en el marco de las iniciativas globales de concientización en seguridad