What is GHSA-5j33-g9fw-4r4f?

GHSA-5j33-g9fw-4r4f is a security advisory published by GitHub Security Advisories with High severity. The VikRentItems Flexible Rental Management System WordPress plugin before 1.2.4 does not...

Which CVE IDs does GHSA-5j33-g9fw-4r4f cover?

GHSA-5j33-g9fw-4r4f covers the following CVE IDs: CVE-2026-88926. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-5j33-g9fw-4r4f?

GHSA-5j33-g9fw-4r4f has a CVSS v3 base score of 8.6, published by GitHub Security Advisories.

GHSA-5j33-g9fw-4r4fHighCVSS 8.6

The VikRentItems Flexible Rental Management System WordPress plugin before 1.2.4 does not...

Vendor

GitHub Security Advisories

Published

September 19, 2026

Last Modified

September 19, 2026

🔗 CVE IDs covered (1)

CVE-2026-88926 →

📋 Description

The VikRentItems Flexible Rental Management System WordPress plugin before 1.2.4 does not sanitise and escape some of its parameters before using them in SQL statements, allowing unauthenticated users to perform SQL injection attacks.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-88926
https://wpscan.com/vulnerability/da39827b-f087-48f3-baa9-759709a3767e
https://github.com/advisories/GHSA-5j33-g9fw-4r4f