https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-29T02:12:48.595205+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-104694 CVE-2026-104694 — Thrive Automator < 11.2 - Editor+ Blind SQLi via 'additional' Parameter 2026-10-29T02:12:48.596094+00:00

Affected: Unknown Thrive Automator

The Thrive Automator WordPress plugin before 11.2 does not properly sanitize and escape a parameter's array key before using it in a SQL query, allowing authenticated attackers with editor-level access to perform blind SQL injection attacks.