PT-2026-25302 · Realmag777 · Wolf

Nguyen Ba Khanh · Published 2026-03-13 · Updated 2026-03-14 · CVE-2026-32458

Positive Technologies (AI Summary)

CVSS v3.1

7.6

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L

Name of the Vulnerable Software and Affected Versions RealMag777 WOLF versions through 1.0.8.7

Description The RealMag777 WOLF bulk-editor is susceptible to a SQL Injection issue, specifically a Blind SQL Injection. This allows attackers to execute arbitrary SQL queries against the database. Attackers may potentially read or modify sensitive database data, which could lead to account takeover or site compromise. The issue stems from improper neutralization of special elements used in an SQL command.

Recommendations Update the plugin to the latest patched version. Restrict access to WordPress admin endpoints. Monitor logs for suspicious SQL queries. Use a WAF or database query filtering.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2026-32458

Affected Products

Wolf

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-32458 · Security Note
• https://fixthecve.com/cve/CVE-2026-32458 · Reddit Post
• https://t.me/CVEtracker/47358 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2032608499729940938 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/bulk-editor/vulnerability/wordpress-wolf-plugin-1-0-8-7-sql-injection-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/2032831397044551952 · Twitter Post