Mmastodon TechnologyCybersecurity first seen 14 h ago, last 14 h ago, peak #12

Critical SQL Injection Flaw Found in Porto Theme Plugin

Original: CRITICAL SQL injection (CVE-2026-42415) in p-themes Porto Theme - Functionality ≤3.9.3. Unauthenticated attackers can st

A critical SQL injection vulnerability, tracked as CVE-2026-42415, has been identified in the Porto Theme - Functionality plugin for WordPress, versions 3.9.3 and below. Unauthenticated attackers can exploit the flaw to steal sensitive database data. No official patch is available yet, and security researchers are urging users to restrict access to affected sites until a fix is released.

Why now: A newly disclosed unpatched critical vulnerability puts WordPress sites at immediate risk of data theft.

Porto Theme - FunctionalityCVE-2026-42415WordPressp-themes

Open on mastodon →

Evidence

• CRITICAL SQL injection (CVE-2026-42415) in p-themes Porto Theme - Functionality ≤3.9.3. Unauthenticated attackers can steal sensitive data. No official patch yet — restrict access ASAP. https:// radar.offseq.com/threat/cve-20… · offseq@infosec.exchange · 1

API: https://socialmediatrends-api.osmike.com/v1/trends/1229253