What is GHSA-v93r-8356-mr5w?

GHSA-v93r-8356-mr5w is a security advisory published by GitHub Security Advisories with High severity. The SAMO Forms WordPress plugin through 1.0.0 does not properly sanitise and escape user input...

Which CVE IDs does GHSA-v93r-8356-mr5w cover?

GHSA-v93r-8356-mr5w covers the following CVE IDs: CVE-2026-80491. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-v93r-8356-mr5w?

GHSA-v93r-8356-mr5w has a CVSS v3 base score of 8.6, published by GitHub Security Advisories.

GHSA-v93r-8356-mr5wHighCVSS 8.6

The SAMO Forms WordPress plugin through 1.0.0 does not properly sanitise and escape user input...

Vendor

GitHub Security Advisories

Published

September 12, 2026

Last Modified

September 12, 2026

🔗 CVE IDs covered (1)

CVE-2026-80491 →

📋 Description

The SAMO Forms WordPress plugin through 1.0.0 does not properly sanitise and escape user input before using it in SQL queries in several unauthenticated actions, allowing unauthenticated attackers to perform SQL injection attacks.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-80491
https://wpscan.com/vulnerability/765e7131-2eb4-41df-a1e0-05c8a89cb88c
https://github.com/advisories/GHSA-v93r-8356-mr5w