Unknown Wp Verify API vulnerabilities

2 CVEs affecting Unknown Wp Verify API, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-89299, published 2026-10-11.

More from Unknown.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-89299, published 2026-10-11. High severity, CVSS 8.6. EPSS: 0.3% chance of exploitation in the next 30 days. The WP Verify API WordPress plugin through 1.0.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks.
• CVE-2026-89300, published 2026-09-28. Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days. The WP Verify API WordPress plugin through 1.0.0 does not have any authorisation check in one of its REST routes, allowing unauthenticated users to insert arbitrary data into its own database table,…