CVE-2026-76005Published
WP Inventory Manager <= 2.5.5 - Authenticated (Contributor+) SQL Injection via 'sort_order' Shortcode Attribute
Exact source revision recorded 29 Oct 2026 03:25:09 UTC. It does not establish the source's current position. Latest evidence.
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-76005 · Microsoft / collected KEV context
cve-program · CVE-2026-76005
- https://www.wordfence.com/threat-intel/vulnerabilities/id/f0682bf7-0b5a-402f-9ae0-34e2f0f65bcf?source=cve
- https://plugins.trac.wordpress.org/browser/wp-inventory-manager/tags/2.5.0/includes/wpinventory.category.class.php#L78
- https://plugins.trac.wordpress.org/browser/wp-inventory-manager/tags/2.5.1/includes/wpinventory.category.class.php#L78
- https://plugins.trac.wordpress.org/browser/wp-inventory-manager/tags/2.5.1/includes/wpinventory.shortcodes.class.php#L107
- https://plugins.trac.wordpress.org/browser/wp-inventory-manager/tags/2.5.1/includes/wpinventory.shortcodes.class.php#L38
- https://plugins.trac.wordpress.org/browser/wp-inventory-manager/tags/2.5.0/includes/wpinventory.shortcodes.class.php#L107
- https://plugins.trac.wordpress.org/browser/wp-inventory-manager/tags/2.5.0/includes/wpinventory.shortcodes.class.php#L38
- https://plugins.trac.wordpress.org/changeset?reponame=&old=3712512%40wp-inventory-manager&new=3712512%40wp-inventory-manager
Current operational correlations are not mixed into this historical source record. Open latest evidence to discover current connections.