CVE-2026-42713highCWE-89

CVE-2026-42713: high-severity vulnerability in Gopiplus Post title marquee scroll

WordPress Post title marquee scroll plugin <= 9.9 - SQL Injection vulnerability

Published 07 Oct 2026

18Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.6

exploitation probability

—

observed exploitation

nono source reports it

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Gopiplus Post title marquee scroll post-title-marquee-scroll allows Blind SQL Injection.This issue affects Post title marquee scroll: from n/a through 9.9.

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L

Affected products

Gopiplus · Post title marquee scroll

References

https://patchstack.com/database/wordpress/plugin/post-title-marquee-scroll/vulnerability/wordpress-post-title-marquee-scroll-plugin-9-9-sql-injection-vulnerability?_s_id=cve