SQL Injection Vulnerability in DXP ToolKit

WordPress

What happened

A vulnerability in Crowd Favorite DXP ToolKit allows for SQL injection, which could potentially compromise the integrity of the database.

Are you affected?

DXP ToolKit users who may be using any version from n/a up to 2.0.1.

What to do now

1. Upgrade to a version that addresses the vulnerability or check the official advisory for fixes.
2. Review your application for any potential SQL injection vulnerabilities and implement security measures.
3. Monitor your system for any unusual activity that might indicate exploitation attempts.

Sources

• cve.now/CVE-2026-115607
• cve.now/GHSA-gj44-v26q-v728
• CVE-2026-115607
• GHSA-gj44-v26q-v728
• https://nvd.nist.gov/vuln/detail/CVE-2026-115607
• https://patchstack.com/database/wordpress/plugin/dxp-toolkit/vulnerability/wordpress-dxp-toolkit-plugin-2-0-1-sql-injection-vulnerability?_s_id=cve
• cve.now/GHSA-GJ44-V26Q-V728
• GHSA-GJ44-V26Q-V728

Data sources: cve.now, CISA KEV, GitHub Advisory Database, OSV.

This product uses data from the NVD API but is not endorsed or certified by the NVD.