TI-2026-39089 CVE-2026-54185 · GHSA-w7vq-93h2-r7jj
WordPress Cornerstone plugin < 7.8.8 - SQL Injection vulnerability
Priority LOW 37
Subscriber SQL Injection in Cornerstone < 7.8.8 versions.
3 records
Subscriber SQL Injection in Cornerstone < 7.8.8 versions.
Subscriber Arbitrary Code Execution in Cornerstone < 7.8.8 versions.
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in THEMECO Cornerstone cornerstone allows Stored XSS.This issue affects Cornerstone: from n/a through <= 7.7.3.