minnpost

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

minnpost records in CISA KEV

No minnpost vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-12773 CVE-2026-15162 · GHSA-5x6m-wm6g-mfv9

Object Sync for Salesforce <= 2.2.13 - Unauthenticated SQL Injection

MEDIUM 40

The Object Sync for Salesforce plugin is vulnerable to unauthenticated SQL Injection via the wordpress_object_type parameter of its /wp-json/object-sync-for-salesforce/push/ REST route.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00577 Published 2026-08-15 No fix listed CWE-89

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0