CVE-2026-62060
WordPress Captivate Sync plugin <= 3.3.2 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in captivateaudio Captivate Sync captivatesync-trade allows Blind SQL Injection.This issue affects Captivate Sync: from n/a through 3.3.2.
CVSS 3.1 · 7.6 High
EPSS < 1%
KEV · Not listed
Vendors
Products