A vulnerability has been found in themefic Tourfic Plugin up to 2.22.7 on WordPress and classified as critical. Affected is an unknown function of the component AJAX Handler. The manipulation of the argument post_id leads to sql injection.
This vulnerability is documented as CVE-2026-12937. The attack can be initiated remotely. There is not any exploit available.
The affected component should be upgraded.
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2026-12937 | themefic Tourfic Plugin up to 2.22.7 on WordPress AJAX post_id sql injection (EUVD-2026-39189)
A vulnerability has been found in themefic Tourfic Plugin up to 2.22.7 on WordPress and classified as critical. Affected is an unknown function of the component AJAX Handler. The manipulation of the argument post_id leads to sql…
Reagiere als Erste:r — dein Feedback zählt!
SOCIAL SHARE CARD GENERATOR