https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-01T15:14:08.064176+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-87775 fkie_cve-2026-87775 2026-10-01T15:14:09.075643+00:00

The Tz Weekly Radio Schedule WordPress plugin through 1.8.1 does not sanitize and escape a parameter before using it to build a SQL query on an AJAX action available to unauthenticated users, allowing unauthenticated attackers to perform SQL injection attacks and extract sensitive data from the database.

 https://vulnerability.circl.lu/vuln/ghsa-93x5-88q4-f8c3 GHSA-93x5-88q4-f8c3 2026-10-01T15:14:09.075766+00:00

The Tz Weekly Radio Schedule WordPress plugin through 1.8.1 does not sanitize and escape a parameter before using it to build a SQL query on an AJAX action available to unauthenticated users, allowing unauthenticated attackers to perform SQL injection attacks and extract sensitive data from the database.