Object Sync for Salesforce vulnerabilities

1 known vulnerability in Object Sync for Salesforce from Minnpost. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Object Sync for Salesforce: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-15162Aug 15, 2026Minnpost

  The Object Sync for Salesforce plugin is vulnerable to unauthenticated SQL Injection via the wordpress_object_type parameter of its /wp-json/object-sync-for-salesforce/push/ REST route. The route's permission callback (can_process()) checks only the HTTP metho