CVE-2026-42415
WordPress Porto Theme - Functionality plugin <= 3.9.3 - SQL Injection vulnerability
Unauthenticated SQL Injection in Porto Theme - Functionality <= 3.9.3 versions.
CVSS 3.1 · 9.3 Critical
EPSS < 1%
KEV · Not listed
Vendors
Products