Latest
●Attacker Poses as AI Crawlers to Hunt for Exposed Credentials●Functype MCP server flaw let tool calls run arbitrary code●Token Security says blast radius matters more than patch speed●OpenAI agent validated 14 leaked Hugging Face tokens●123 Reg says customer data taken in 'AI-driven cyberattack'●Infisical raises $40m to secure AI agents' access to secrets●MLflow autologging writes CrewAI API keys into trace data●AI agent finds four severe flaws in EPICS control software
Wednesday, 28 October 2026
5 agent hacks today▼ 5 vs yesterday (10)
The Agentic TimesPowered byVortal

Incident database

CVE-2026-3456: SQL injection in WordPress GeekyBot AI chatbot plugin

The GeekyBot AI content and chatbot/lead generation plugin for WordPress is vulnerable to SQL injection via the 'attributekey' parameter in versions up to and including 1.2.0, allowing unauthenticated attackers to extract sensitive database information.

Disclosed 5 May 2026 · Record updated 1 October 2026

Impact

Unauthenticated attackers can append SQL queries to existing queries to extract sensitive information from the site database.

Our coverage

No articles linked to this incident yet.

Sources

  1. nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2026-3456