CVE-2026-89299Suited to automated attack · CISA
WP Verify API <= 1.0.0 - Unauthenticated SQLi via 'verify' Parameter
CVSS score
8.6
EPSS probability
%0.3
Risk score
0.0
Published
4 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
9.8
CVE-2026-109145
User Rights Access Manager <= 1.1.3 - Unauthenticated Privilege Escalation via AJAX Registration Handler
U
Patch status unknown
7.5
CVE-2026-96537
Tutor LMS < 4.1.1 - Unauthenticated Tutor Page Force-Publish and Content Overwrite
U
Patch status unknown
7.1
CVE-2026-74920
Document Gallery <= 5.1.1 - Reflected XSS via data-shortcode Attribute
U
Patch status unknown
6.5
CVE-2026-106031
Spin Wheel < 2.2.1 - Unauthenticated Coupon Code Disclosure via Forged Spin Result
U
Patch status unknown
6.5
CVE-2026-103308
Visma Pay for WooCommerce < 1.2.2 - Unauthenticated Payment Bypass and Order Data Disclosure via Gateway Return Endpoint
U
Patch status unknown
5.4
CVE-2026-97315
Responsive Blocks < 2.3.0 - Unauthenticated HTML Injection in Form Notification Email
U
Patch status unknown
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-89299"