CVE-2026-23805

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-23805", "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", "state": "PUBLISHED", "assignerShortName": "Patchstack", "dateReserved": "2026-01-16T14:15:17.505Z", "datePublished": "2026-02-19T08:26:50.551Z", "dateUpdated": "2026-04-28T16:14:47.291Z"}, "containers": {"cna": {"affected": [{"collectionURL": "https://wordpress.org/plugins", "defaultStatus": "unaffected", "packageName": "media-search-enhanced", "product": "Media Search Enhanced", "vendor": "Yoren Chang", "versions": [{"changes": [{"at": "0.9.2", "status": "unaffected"}], "lessThanOrEqual": "0.9.1", "status": "affected", "version": "0", "versionType": "custom"}]}], "credits": [{"lang": "en", "type": "finder", "value": "Nabil Irawan | Patchstack Bug Bounty Program"}], "datePublic": "2026-04-01T16:05:11.079Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Yoren Chang Media Search Enhanced media-search-enhanced allows SQL Injection.<p>This issue affects Media Search Enhanced: from n/a through <= 0.9.1.</p>"}], "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Yoren Chang Media Search Enhanced media-search-enhanced allows SQL Injection.This issue affects Media Search Enhanced: from n/a through <= 0.9.1."}], "impacts": [{"capecId": "CAPEC-66", "descriptions": [{"lang": "en", "value": "SQL Injection"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 7.6, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-89", "description": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "21595511-bba5-4825-b968-b78d1f9984a3", "shortName": "Patchstack", "dateUpdated": "2026-04-28T16:14:47.291Z"}, "references": [{"tags": ["vdb-entry"], "url": "https://patchstack.com/database/Wordpress/Plugin/media-search-enhanced/vulnerability/wordpress-media-search-enhanced-plugin-0-9-1-sql-injection-vulnerability?_s_id=cve"}], "title": "WordPress Media Search Enhanced plugin <= 0.9.1 - SQL Injection vulnerability"}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-02-24T19:17:25.947120Z", "id": "CVE-2026-23805", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-28T15:44:55.711Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-23805", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-02-24T19:17:25.947120Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-24T19:17:40.964Z"}}], "cna": {"title": "WordPress Media Search Enhanced plugin <= 0.9.1 - SQL Injection vulnerability", "credits": [{"lang": "en", "type": "finder", "value": "Nabil Irawan | Patchstack Bug Bounty Program"}], "impacts": [{"capecId": "CAPEC-66", "descriptions": [{"lang": "en", "value": "SQL Injection"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 7.6, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Yoren Chang", "product": "Media Search Enhanced", "versions": [{"status": "affected", "changes": [{"at": "0.9.2", "status": "unaffected"}], "version": "0", "versionType": "custom", "lessThanOrEqual": "0.9.1"}], "packageName": "media-search-enhanced", "collectionURL": "https://wordpress.org/plugins", "defaultStatus": "unaffected"}], "datePublic": "2026-04-28T13:26:14.289Z", "references": [{"url": "https://patchstack.com/database/Wordpress/Plugin/media-search-enhanced/vulnerability/wordpress-media-search-enhanced-plugin-0-9-1-sql-injection-vulnerability?_s_id=cve", "tags": ["vdb-entry"]}], "descriptions": [{"lang": "en", "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Yoren Chang Media Search Enhanced media-search-enhanced allows SQL Injection.This issue affects Media Search Enhanced: from n/a through <= 0.9.1.", "supportingMedia": [{"type": "text/html", "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Yoren Chang Media Search Enhanced media-search-enhanced allows SQL Injection.<p>This issue affects Media Search Enhanced: from n/a through <= 0.9.1.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-89", "description": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"}]}], "providerMetadata": {"orgId": "21595511-bba5-4825-b968-b78d1f9984a3", "shortName": "Patchstack", "dateUpdated": "2026-04-28T12:10:44.657Z"}}}, "cveMetadata": {"cveId": "CVE-2026-23805", "state": "PUBLISHED", "dateUpdated": "2026-04-28T15:44:55.711Z", "dateReserved": "2026-01-16T14:15:17.505Z", "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", "datePublished": "2026-02-19T08:26:50.551Z", "assignerShortName": "Patchstack"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"collectionURL": "https://wordpress.org/plugins", "defaultStatus": "unaffected", "packageName": "media-search-enhanced", "product": "Media Search Enhanced", "vendor": "Yoren Chang", "versions": [{"changes": [{"at": "0.9.2", "status": "unaffected"}], "lessThanOrEqual": "0.9.1", "status": "affected", "version": "0", "versionType": "custom"}]}], "source": "audit@patchstack.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Yoren Chang Media Search Enhanced media-search-enhanced allows SQL Injection.This issue affects Media Search Enhanced: from n/a through <= 0.9.1."}, {"lang": "es", "value": "Neutralizaci\u00f3n Incorrecta de Elementos Especiales utilizados en un Comando SQL ('Inyecci\u00f3n SQL') vulnerabilidad en Yoren Chang Media Search Enhanced media-search-enhanced permite Inyecci\u00f3n SQL. Este problema afecta a Media Search Enhanced: desde n/a hasta &lt;= 0.9.1."}], "id": "CVE-2026-23805", "lastModified": "2026-06-17T10:22:07.710", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 7.6, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L", "version": "3.1"}, "exploitabilityScore": 2.3, "impactScore": 4.7, "source": "audit@patchstack.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-23805", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-02-24T19:17:25.947120Z", "version": "2.0.3"}}]}, "published": "2026-02-19T09:16:13.360", "references": [{"source": "audit@patchstack.com", "url": "https://patchstack.com/database/Wordpress/Plugin/media-search-enhanced/vulnerability/wordpress-media-search-enhanced-plugin-0-9-1-sql-injection-vulnerability?_s_id=cve"}], "sourceIdentifier": "audit@patchstack.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-89"}], "source": "audit@patchstack.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "unaffected", "versions": null}], "enrichment": {"confidence": 80.0, "confidence_source": "inferred", "scores": [{"score": 80.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "product": "wordpress", "vendor": "wordpress"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,0.9.1]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[0.9.2,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "Media Search Enhanced", "source": "cna", "vendor": "Yoren Chang"}, "product": "media_search_enhanced", "vendor": "yoren_chang"}], "analysis": {"en": {"generated_at": "2026-04-16T06:40:10.221155+00:00", "value": {"mitigation_remediation": ["Apply the latest version of Media Search Enhanced that contains the fix, or revert to an earlier, unpatched release only temporarily.", "Ensure that any user\u2011supplied search parameters are properly escaped or parameterized before inclusion in SQL statements (apply input validation and sanitization).", "Restrict access to the plugin\u2019s search functionality to authenticated users with appropriate permissions, or remove the feature entirely if it is unnecessary."], "summary": {"action": "Immediate Patch", "impact": "Potential Data Compromise via SQL Injection"}, "threat_synthesis": {"affected_systems": "The affected products are the Media Search Enhanced plugin developed by Yoren Chang, versions from the initial release through 0.9.1 inclusive. Users running any of these versions on WordPress sites are vulnerable, regardless of theme or other plugins installed.", "description_and_impact": "Yoren Chang Media Search Enhanced plugin versions up to 0.9.1 contain an SQL Injection flaw caused by improper sanitization of special elements in SQL statements. This weakness allows an attacker to craft input that is inserted directly into database queries, potentially permitting extraction of sensitive database contents, modification of data, or escalation of privileges. The vulnerability is classified as CWE\u201189, indicating that erroneous handling of user\u2011supplied data in SQL operations directly undermines confidentiality and integrity.", "risk_and_exploitability": "The CVSS score of 7.6 denotes a high severity and the EPSS score of less than 1% suggests that, while exploitation is technically possible, current observed exploitation activity is low. The vulnerability is not currently listed in the CISA KEV catalog. Attacks would most likely occur over the public internet by submitting crafted search queries through the plugin\u2019s interface; the plugin does not enforce authentication or input validation, so unauthenticated users could exploit the flaw."}}}}, "created": "2026-02-20T10:11:14.458901+00:00", "updated": "2026-04-16T06:45:16.316520+00:00", "vendors": ["wordpress", "wordpress$PRODUCT$wordpress", "yoren_chang", "yoren_chang$PRODUCT$media_search_enhanced"]}