Vulnerability in Sql Chart Builder

CVE-2026-4079

The SQL Chart Builder WordPress plugin before 2.3.8 does not properly escape user input as it is concatened to SQL queries, making it possible for attackers to conduct SQL Injection attacks against the dynamic filter functionality.

EPSS: 0.000 (10.9th percentile) — read the EPSS interpretation.

Affected products

  • Unknown Sql Chart Builder — versions 0

References