Approved changes feed: RSS · Atom

cpe:2.3:a:guaven:sql_chart_builder:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorGuaven (819c9b28-9fc5-5f93-b5fb-24274ad86ca0)
ProductSql Chart Builder (6ac859b5-ab8e-52e9-bbae-76f595d2298e)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
pkg:github/common-repository/sql-chart-builder purl2cpe 2026-07-28 16:40:53.683166

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-4079 vulnerable 2026-06-08 08:05:12.577322 SQL Chart Builder < 2.3.8 - Unauthenticated SQL Injection
The SQL Chart Builder WordPress plugin before 2.3.8 does not properly escape user input as it is concatened to SQL queries, making it possible for attackers to conduct SQL Injection attacks against the dynamic filter functionality.
Published: 2026-04-07T06:00:11.585Z
Updated: 2026-04-07T16:26:56.057Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.