CVE-2026-76005— WP Inventory Manager <= 2.5.5 - Authenticated (Contributor+) SQL Injection via 'sort_order' Shortcode Attribute
Quick assessment
Affected
chuck1982 WP Inventory Manager
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
WordPress 的 WP Inventory Manager 插件在所有 2.5.5 及更早版本中，存在基于时间的 SQL 注入漏洞。该漏洞源于对用户提供的 短代码属性参数转义不足，且现有 SQL 查询未进行充分的预处理。这使得拥有“贡献者”（Contributor）及以上权限的已认证攻击者，能够将额外的 SQL 查询附加到现有查询中，从而从数据库中提取敏感信息。 该漏洞可利用方式如下：攻击者（贡献者）可在处于草稿状态的文章中嵌入 短代码，并通过预览功能渲染该文章，而无需将文章正式发布即可触发漏洞。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-76005
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
WP Inventory Manager <= 2.5.5 - Authenticated (Contributor+) SQL Injection via 'sort_order' Shortcode Attribute
Source: CVE Program / CVE List V5
Vulnerability Description
The WP Inventory Manager plugin for WordPress is vulnerable to time-based SQL Injection via 'sort_order' Shortcode Attribute in all versions up to, and including, 2.5.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. This can be exploited by a Contributor via the [wpinventory_categories] shortcode embedded in a draft post rendered through preview, without requiring the post to be published.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| chuck1982 | WP Inventory Manager | 0 ~ 2.5.5 | - |
|
II. Public POCs for CVE-2026-76005
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-76005
请登录查看更多情报信息。
Other References for CVE-2026-76005 (8)
IV. Related Vulnerabilities
Same product: WP Inventory Manager
-
CVE-2026-17607
WP Inventory Manager <= 2.5.1 - Authenticated (Contributor+) -
CVE-2026-90887
WordPress WP Inventory Manager plugin <= 2.5.4 - Cross Site -
CVE-2026-57772
WordPress WP Inventory Manager plugin <= 2.4.0 - SQL Injecti -
CVE-2025-49977
WordPress WP Inventory Manager plugin <= 2.3.4 - Cross Site -
CVE-2024-13434
WP Inventory Manager <= 2.3.2 - Reflected Cross-Site Scripti
Same weakness: CWE-89
-
CVE-2026-86386
Dell PowerProtect Data Domain 多版本 SQL 注入漏洞 -
CVE-2026-14571
SQL injection (SQLi) in the user authentication module of Fu -
CVE-2026-86401
Dell PowerProtect Data Domain 7.7.1-8.8 SQL 注入漏洞 -
CVE-2026-90719
Dell PowerProtect Data Domain 多版本 SQL 注入漏洞 -
CVE-2026-90723
Dell PowerProtect 多版本 SQL 注入漏洞