[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fKmCosr-fPhcvtLLM4PTdc1stg6z08JqnrZVug00kj-4":3,"g5a-risk:CVE-2026-60137":145},{"success":4,"data":5,"meta":142},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":32,"epssPercentile":26,"epssTimeSeries":33,"severity":34,"affectedProducts":35,"affectedProductsCount":40,"references":41,"referencesCount":57,"weaknesses":58,"weaknessesCount":40,"isActivelyExploited":4,"cisaInfo":67,"otxData":26,"relatedBlogPosts":68,"seoMetadata":69,"configurations":94,"relatedVendorCves":113,"notableEvents":114},"CVE-2026-60137","What is CVE-2026-60137?","WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the author__not_in parameter of WP_Query, which could allow SQL Injection when a plugin or theme passes untrusted input to the parameter.","WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the author__not_in parameter of WP_Query, which could all...","2026-07-17T20:17:27.79","2026-10-08T10:35:47.777",5.9,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":29,"CVSSMetricV2":30,"CVSSMetricV40":31},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"contact@wpscan.com","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","HIGH","NONE","UNCHANGED","MEDIUM",null,2.2,3.6,[],[],[],0.05323,[32,32,32,32,32,32,32],"Medium",[36],{"vendor":37,"product":37,"version":38,"criteria":39,"vulnerable":4},"wordpress","*","cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",1,[42,47,52],{"url":43,"source":44,"tags":45},"https:\u002F\u002Fgithub.com\u002FWordPress\u002Fwordpress-develop\u002Fsecurity\u002Fadvisories\u002FGHSA-fpp7-x2x2-2mjf","GitHub",[46],"Vendor Advisory",{"url":48,"source":49,"tags":50},"https:\u002F\u002Fwordpress.org\u002Fnews\u002F2026\u002F07\u002Fwordpress-7-0-2-release\u002F","Wordpress",[51],"Release Notes",{"url":53,"source":54,"tags":55},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2026-60137","CISA",[56],"US Government Resource",3,[59],{"id":60,"name":61,"description":62,"extendedDescription":63,"status":64,"abstraction":65,"structure":66},"CWE-89","Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')","The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.","","Stable","Base","Simple",{"shortDescription":63,"requiredAction":63,"vulnerabilityName":63,"dateAdded":26},[],{"title":70,"metaDescription":71,"keywords":72,"canonicalUrl":73,"structuredData":74},"What is CVE-2026-60137? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2026-60137, a medium severity cyber security vulnerability from 2026. WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0...","CVE-2026-60137, CVE-2026-60137 vulnerability, CVE-2026-60137 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2026, CVSS score, exploit, patch, remediation, wordpress security, wordpress vulnerability","\u002Fwhat-is\u002Fcve-2026-60137",{"@context":75,"@type":76,"headline":70,"description":71,"datePublished":10,"dateModified":11,"author":77,"publisher":81,"about":85,"mainEntityOfPage":89,"articleSection":92,"keywords":93},"https:\u002F\u002Fschema.org","TechArticle",{"@type":78,"name":79,"url":80},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":78,"name":79,"url":80,"logo":82},{"@type":83,"url":84},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":86,"name":6,"description":87,"additionalType":88},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":90,"@id":91},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2026-60137","Cybersecurity","CVE-2026-60137, CVE-2026-60137 vulnerability, CVE-2026-60137 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[95],{"Operator":26,"Negate":26,"Nodes":96},[97],{"Operator":98,"Negate":99,"CPEMatch":100},"OR",false,[101,105,109],{"Vulnerable":4,"Criteria":39,"MatchCriteriaID":102,"VersionStartExcluding":26,"VersionStartIncluding":103,"VersionEndExcluding":104,"VersionEndIncluding":26},"AA95FD78-D475-499E-9C1A-A2720E9E968A","6.8","6.8.6",{"Vulnerable":4,"Criteria":39,"MatchCriteriaID":106,"VersionStartExcluding":26,"VersionStartIncluding":107,"VersionEndExcluding":108,"VersionEndIncluding":26},"D5B37C71-893E-460E-8790-88EF786DF56E","6.9","6.9.5",{"Vulnerable":4,"Criteria":39,"MatchCriteriaID":110,"VersionStartExcluding":26,"VersionStartIncluding":111,"VersionEndExcluding":112,"VersionEndIncluding":26},"02352A0A-26C7-4ABC-83F6-8493C6A3FB5C","7.0","7.0.2",[],[115,122,129,135],{"id":116,"eventType":117,"eventTime":118,"details":119,"label":120,"color":121},"d1c4bc5a-905a-44f1-864a-8922c39e6676","NEW_NVD","2026-07-18T04:01:47.154794+00:00","New CVE added to NVD","Published to NVD","blue",{"id":123,"eventType":124,"eventTime":125,"details":126,"label":127,"color":128},"be09c9cf-7efc-456d-aa5c-c0ee56d57426","NEW_CISA","2026-07-22T04:01:03.69577+00:00","CVE added to CISA Known Exploited Vulnerabilities","Added to CISA KEV","red",{"id":130,"eventType":131,"eventTime":132,"details":133,"label":134,"color":128},"256c55c0-2cc2-4c62-acc5-3a98dfffe605","HIGH_EPSS_DELTA","2026-07-23T04:04:39.870206+00:00","Daily EPSS score increased by 0.164 on 2026-07-19","EPSS Score Increased",{"id":136,"eventType":137,"eventTime":138,"details":139,"label":140,"color":141},"32ca0222-690c-4bfd-a397-da2e1407525d","LOW_EPSS_DELTA","2026-09-25T04:05:20.444551+00:00","Daily EPSS score decreased by 0.724 on 2026-07-19","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":143,"version":144},1792276233976,"2.0",{"score":146,"band":147,"action":148,"scoredAt":149},74,"High","Emergency patch","2026-10-16T07:15:12.172861+00:00"]