CVE-2026-88926 — VikRentItems Flexible Rental Management System < 1.2.4 - Unauthenticated SQLi
The VikRentItems Flexible Rental Management System WordPress plugin before 1.2.4 does not sanitise and escape some of its parameters before using them in SQL statements, allowin…
Published: 2026-09-19 · CVSS: 8.6 · CVSS 3.1
The VikRentItems Flexible Rental Management System WordPress plugin before 1.2.4 does not sanitise and escape some of its parameters before using them in SQL statements, allowing unauthenticated users to perform SQL injection attacks.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7