CVE · Medium

CVE-2026-116614 — Improper Neutralization of Special Elements used in an SQL Command

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-116614 Improper Neutralization of Special Elements used in an SQL Command Improper Neutralization of Special Elements used in an SQL Command Medium 4.9 < 2.24.1 2.24.1 2026-11-13 —

CVE-2026-116614 is a Improper Neutralization of Special Elements used in an SQL Command vulnerability in the WordPress plugin WPMR Google Feed Manager for WooCommerce – Sell on Google Merchant Center & Shopping (wp-product-feed-manager). Versions up to and including 2.24.1 are affected; no patched version is recorded. CVSS score: 4.9 (Medium). Published 2026-11-13.

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.