Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

1 record

Vendor: Dave Jesch Clear all filters
TI-2026-12641 CVE-2026-15018 · GHSA-jfr9-hqmg-pcc8

Database Collation Fix <= 1.2.10 - Unauthenticated SQL Injection via 'force-collation-algorithm' Parameter

Priority LOW 24

The Database Collation Fix plugin for WordPress is vulnerable to time-based SQL Injection via the 'force-collation-algorithm' parameter in all versions up to, and including, 1.2.10 due to insufficient escaping on the use…

CVSS 3.1MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0042 Published 2026-08-01 No fix listed CWE-89