{"uuid": "c248120e-58dd-4139-8af2-d4b42719edb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103695", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117420848612783210", "content": "CVE-2026-103695 Mobile Builder <= 1.4.2 - Unauthenticated SQLi via 'vendor_id' Parameter The Mobile builder WordPress plugin through 1.4.2 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks.\nhttps://www.cve.org/CVERecord?id=CVE-2026-103695https://wpscan.com/vulnerability/6338f3af-1702-4095-a60e-a6e3dff09018/#CVE_2026_103695#bot", "creation_timestamp": "2026-10-11T06:26:00.986454Z"}