CVE-2026-49079

Unauthenticated SQL Injection in JetSearch <= 3.5.17 versions.

Score

CVSS 3.1 9.3 Critical

Status

Deferred - audit@patchstack.com

Published

2026-06-17

Last modified

2026-10-26

Weaknesses

CWE-89

Affected products

• Jetsearch (Jetimpex Inc.)

References

• https://patchstack.com/database/wordpress/plugin/jet-search/vulnerability/wordpress-jetsearch-plugin-3-5-17-sql-injecti…