PT-2026-25302 · Realmag777 · Wolf

Nguyen Ba Khanh · Publicado 2026-03-13 · Atualizado 2026-03-14 · CVE-2026-32458

Positive Technologies (AI Summary)

CVSS v3.1

7.6

Alta

Vetor base

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L

Name of the Vulnerable Software and Affected Versions RealMag777 WOLF versions through 1.0.8.7

Description The RealMag777 WOLF bulk-editor is susceptible to a SQL Injection issue, specifically a Blind SQL Injection. This allows attackers to execute arbitrary SQL queries against the database. Attackers may potentially read or modify sensitive database data, which could lead to account takeover or site compromise. The issue stems from improper neutralization of special elements used in an SQL command.

Recommendations Update the plugin to the latest patched version. Restrict access to WordPress admin endpoints. Monitor logs for suspicious SQL queries. Use a WAF or database query filtering.

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2026-32458

Produtos afetados

Wolf

Referências · 6

• https://fixthecve.com/cve/CVE-2026-32458 · Publicação no Reddit
• https://t.me/CVEtracker/47358 · Publicação no Telegram
• https://twitter.com/VulmonFeeds/status/2032608499729940938 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-32458 · Nota de Segurança
• https://patchstack.com/database/Wordpress/Plugin/bulk-editor/vulnerability/wordpress-wolf-plugin-1-0-8-7-sql-injection-vulnerability?_s_id=cve · Nota
• https://twitter.com/CVEnew/status/2032831397044551952 · Publicação no Twitter