CVE-2026-19053
Deferred Deferred - Pending Action

Blind SQL Injection in ProSolution WP Client WordPress Plugin

Publication date: 2026-08-10

Last updated on: 2026-08-26

Assigner: WPScan

Description
The ProSolution WP Client WordPress plugin before 2.0.6 does not sanitise and escape a parameter before using it in a SQL statement reachable by unauthenticated visitors, leading to a blind SQL injection.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-10
Last Modified
2026-08-26
Generated
2026-08-30
AI Q&A
2026-08-10
EPSS Evaluated
2026-08-29
NVD
CVE-2026-19053
EUVD
EUVD-2026-55009

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
prosolution wp_client to 2.0.6 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-89 The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

The ProSolution WP Client WordPress plugin before version 2.0.6 has a blind SQL injection vulnerability. This occurs because the 'jobID' parameter is not properly sanitized or escaped before being used in a SQL query. Attackers can exploit this without authentication to manipulate database queries.

Detection Guidance

Check if the ProSolution WP Client plugin version is below 2.0.6. Use WordPress admin panel or run: wp plugin list | grep wp_client. Test for blind SQL injection by sending crafted requests to the 'jobID' parameter in affected endpoints.

Impact Analysis

This vulnerability allows unauthenticated attackers to execute arbitrary SQL commands on your WordPress database. This could lead to unauthorized data access, modification, or deletion, potentially exposing sensitive information stored in the database.

Compliance Impact

This vulnerability could lead to unauthorized access or exposure of personal data, violating GDPR and HIPAA requirements for data protection and security. Non-compliance may result in legal penalties, fines, or reputational damage.

Mitigation Strategies

Update the ProSolution WP Client plugin to version 2.0.6 or later immediately. If updating is not possible, disable the plugin until a patch is applied. Monitor database logs for unusual queries.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-19053. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart