Site Setup Wizard vulnerabilities
We track 1 vulnerability in Site Setup Wizard products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 11, 2026.
1vulnerabilities
0critical
1high
0exploited
8.6average CVSS score
Latest Site Setup Wizard vulnerabilities
- 8.6 High severity
Site Setup Wizard: Improper Neutralization of Special Elements used in an SQL Command
The Site Setup Wizard WordPress plugin through 1.5.8 does not properly sanitise and escape a parameter before using it in a SQL statement, which allows unauthenticated attackers to perform SQL injection attacks and read data from the database.