---
id: "CVE-2026-115224"
kind: "vulnerability"
aliases: ["CVE-2026-115224"]
title: "Customer Engagement System WordPress plugin: admin SQL injection reads the database"
severity: "medium"
cvss: null
epss: null
exploited: false
status: "open"
category: "package"
products: []
ecosystems: []
tags: ["package", "wordpress", "wordpress-plugin"]
not_affected_if: ["plugin-2.0.2-or-later", "plugin-not-installed"]
published_at: "2026-10-28T06:16:35+00:00"
first_seen_at: "2026-10-28T06:31:27+00:00"
updated_at: "2026-10-28T06:32:24+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-115224", "first_seen_at": "2026-10-28T06:31:27+00:00"}]
---

# Customer Engagement System WordPress plugin: admin SQL injection reads the database

The Customer Engagement System WordPress plugin before 2.0.2 builds the SQL INSERT that saves popup page and category visibility rules by concatenating request-supplied IDs directly into the query. An authenticated administrator can inject arbitrary SQL and read the WordPress database.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed plugin version in the WordPress admin plugins list or with `wp plugin get <plugin-slug> --field=version`; versions below `2.0.2` are affected.

## Fix

- Update the Customer Engagement System plugin to `2.0.2` or later.
- Until updated, restrict administrator accounts to trusted users.

## Timeline

- 2026-10-28T06:31:27+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-115224

## From the sources

The Customer Engagement System  WordPress plugin before 2.0.2 does not safely build the SQL statements that store a popup's page and category visibility rules, concatenating request-supplied ID values directly into an INSERT statement with no parameter binding or integer cast, allowing an authenticated administrator to inject arbitrary SQL and read the contents of the WordPress database.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_