CVE-2026-18443 | storeapps Smart Manager Plugin up to 8.97.0 on WordPress access_privileges sql injection

October 3, 2026 Yanac

A vulnerability described as critical has been identified in storeapps Smart Manager Plugin up to 8.97.0 on WordPress. The affected element is an unknown function. Executing a manipulation of the argument access_privileges can lead to sql injection.

This vulnerability is registered as CVE-2026-18443. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More