WordPress JS Archive List <= 6.1.5 - SQL Injection
CVE-2025-54726
Verified
Description
Miguel Useche JS Archive List contains an sql injection caused by improper neutralization of special elements in SQL commands, letting attackers execute arbitrary SQL queries, exploit requires crafted input.
Severity
High
CVSS Score
7.5
Exploit Probability
2%
Published Date
February 13, 2026
Template Author
shivam kamboj
CVE-2025-54726.yaml
7.5Score
CVSS Metrics
CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVE ID:
cve-2025-54726
CWE ID:
cwe-89
References
https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/jquery-archive-list-widget/js-archive-list-615-unauthenticated-sql-injectionhttps://patchstack.com/database/wordpress/plugin/jquery-archive-list-widget/vulnerability/wordpress-js-archive-list-plugin-6-1-6-sql-injection-vulnerabilityhttps://nvd.nist.gov/vuln/detail/CVE-2025-54726
Remediation Steps
Update to the latest version.