WordPress Riode Core Plugin SQL Injection Vulnerability
Vulnerability
A blind SQL injection vulnerability has been identified in the WordPress Riode Core plugin, specifically in versions through 1.6.26. This vulnerability allows attackers to manipulate SQL queries, potentially leading to unauthorized data access or modification.
Impact
Exploitation of this vulnerability could allow attackers to interact with the database of the WordPress site, with the possibility of stealing or manipulating information.
Remediation
Users of the WordPress Riode Core plugin should update to version 1.6.27 or later. Patchstack users can enable auto-update for vulnerable plugins.
Added: Mar 5, 2026, 7:45 AM
Updated: Mar 5, 2026, 7:45 AM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
2.5exploitability
7.4remediation
0.0relevance
3.5threat
0.0urgency
2.9incentive
4.2Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.