Techradar
Over 40,000 WordPress Sites Compromised by SQL Injection Vulnerability
First seen 7 Feb 2026, 04:28 UTC
•
•65.0
Export
Article Content
Browse articles
An SQL injection vulnerability has been identified in versions 10.3.1 and prior of the QSM plugin for WordPress, affecting over 40,000 sites. Users with 'subscriber' accounts or higher privileges can exploit this flaw, as noted in a security advisory from Patchstack.
Analyzing cluster data...
Referenced clusters:
Something went wrong. Please try again.
More articles in this cluster
Continue Reading
CVE-2026-2441: Zero-Day CSS Vulnerability in Chromium-Based Browsers
Critical Joomla JCE Vulnerability Under Active Exploitation
Lazarus Group Exploits Windows Zero-Day to Target Defense Sector
Critical Flaw in Modular DS WordPress Plugin Enables Admin Takeover
Critical SQL Injection Vulnerability in GPTranslate Plugin (CVE-2026-49776)
Critical NGINX Vulnerability CVE-2026-42945 Exposes Millions to RCE and DoS Attacks