{"id":"CVE-2026-91074","title":"BSK PDF Manager <= 3.8.1 - Contributor+ SQLi via tags_specific Shortcode Attribute","summary":"The BSK PDF Manager WordPress plugin through 3.8.1 does not properly sanitise and escape a parameter before using it in a SQL statement, which could allow authenticated users with contributor-level access and above to perform SQL injecti…","severity":"medium","cvss":6.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N","cvssSource":"adp","cwe":["CWE-89"],"product":"BSK PDF Manager","affected":["bsk_pdf_manager <= 3.8.1"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-10-18T11:02:14.449538Z"},"published":"2026-10-17","updated":"2026-10-18","sourceUpdated":"2026-10-18T11:12:33.337Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-91074","references":[{"url":"https://wpscan.com/vulnerability/e33c7673-2e31-4f0f-9e29-c65a6b4944a5/"}],"tags":["cve.org"],"ingestedAt":"2026-10-17T07:01:26.053Z","epss":0.00224,"epssPercentile":0.12931,"slug":"CVE-2026-91074","body":"## Overview\n\nThe BSK PDF Manager WordPress plugin through 3.8.1 does not properly sanitise and escape a parameter before using it in a SQL statement, which could allow authenticated users with contributor-level access and above to perform SQL injection attacks and read sensitive data such as administrator password hashes from the database.\n\n## Affected\n\n- `bsk_pdf_manager <= 3.8.1`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":37,"depthScoreParts":{"impact":37.4,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":224045,"id":"CVE-2026-91074","ts":1792323691098,"field":"cvss","old":null,"new":"6.8"},{"seq":224044,"id":"CVE-2026-91074","ts":1792323691098,"field":"severity","old":"none","new":"medium"}]}