PT-2026-25212 · Robfelty · Collapsing Archives

Doan Dinh Van · Publicado 2026-03-13 · Atualizado 2026-03-15 · CVE-2026-32365

Positive Technologies (AI Summary)

CVSS v3.1

8.5

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L

Name of the Vulnerable Software and Affected Versions robfelty Collapsing Archives versions through 3.0.7

Description A flaw exists in robfelty Collapsing Archives that allows for Blind SQL Injection. This issue is due to improper neutralization of special elements used in an SQL command.

Recommendations Versions prior to 3.0.7 should be updated.

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2026-32365

Produtos afetados

Collapsing Archives

Referências · 3

• https://patchstack.com/database/Wordpress/Plugin/collapsing-archives/vulnerability/wordpress-collapsing-archives-plugin-3-0-7-sql-injection-vulnerability?_s_id=cve · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-32365 · Nota de Segurança
• https://twitter.com/CVEnew/status/2032998258486677883 · Publicação no Twitter