{"vulnerability": "CVE-2026-103695", "sightings": [{"uuid": "c248120e-58dd-4139-8af2-d4b42719edb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103695", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117420848612783210", "content": "CVE-2026-103695 Mobile Builder <= 1.4.2 - Unauthenticated SQLi via 'vendor_id' Parameter The Mobile builder WordPress plugin through 1.4.2 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks.\nhttps://www.cve.org/CVERecord?id=CVE-2026-103695https://wpscan.com/vulnerability/6338f3af-1702-4095-a60e-a6e3dff09018/#CVE_2026_103695#bot", "creation_timestamp": "2026-10-11T06:26:00.986454Z"}, {"uuid": "2ccf9b78-9b59-4517-8104-6d547799fbe5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103695", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mxlzh5qjky22", "content": "Mobile builder WordPress plugin 1.4.2\u306bSQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u8106\u5f31\u6027\u3002\u672a\u8a8d\u8a3c\u30e6\u30fc\u30b6\u30fc\u304cSQL\u5b9f\u884c\u53ef\u80fd\u3002\nCVE-2026-103695 CVSS 8.6 | HIGH", "creation_timestamp": "2026-10-11T12:38:04.107725Z"}]}