CVE · Critical

CVE-2026-42415 — Porto Functionality [porto-functionality] <= 3.9.3 (unfixed)

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-42415 Porto Functionality [porto-functionality] <= 3.9.3 (unfixed) Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Critical 9.3 < 3.9.3 3.9.3 2026-10-06 —

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.