CVE-2026-32365

UNKNOWN

WordPress Collapsing Archives plugin <= 3.0.7 - SQL Injection vulnerability

Published Mar 13, 2026

Modified 3 days ago

Details

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in robfelty Collapsing Archives collapsing-archives allows Blind SQL Injection.This issue affects Collapsing Archives: from n/a through <= 3.0.7.

References

WEB

https://patchstack.com/database/Wordpress/Plugin/collapsing-archives/vulnerability/wordpress-collapsing-archives-plugin-3-0-7-sql-injection-vulnerability?_s_id=cve

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2026-32365

Weakness Type (CWE)

Injection

CWE-89

SQL Injection

Ecosystems

Timeline

PublishedMar 13, 2026

ModifiedMar 13, 2026