Minnpost vulnerabilities
We track 1 vulnerability in Minnpost products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 15, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Minnpost vulnerabilities
- 7.5 High severity
Object Sync for Salesforce: Improper Neutralization of Special Elements used in an SQL Command
The Object Sync for Salesforce plugin is vulnerable to unauthenticated SQL Injection via the wordpress_object_type parameter of its /wp-json/object-sync-for-salesforce/push/ REST route. The route's permission callback (can_process()) checks only the HTTP metho