{"id":"CVE-2026-79322","title":"SQL injection in the RelatedProduct block in Mageplaza Blog for Magento 2 (mageplaza/magento-2-blog-extension) through 4.3.2 allows remote unauthenticated attackers to execute arbitrary SQL commands and read arbitrary database contents v…","summary":"SQL injection in the RelatedProduct block in Mageplaza Blog for Magento 2 (mageplaza/magento-2-blog-extension) through 4.3.2 allows remote unauthenticated attackers to execute arbitrary SQL commands and read arbitrary database contents v…","severity":"high","cvss":8.6,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L","cwe":["CWE-89"],"vendor":"mageplaza","product":"mageplaza_blog","affected":["mageplaza_blog <= 4.3.2"],"published":"2026-09-09","updated":"2026-09-10","sourceUpdated":"2026-09-10T17:48:32.410","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-79322","references":[{"url":"https://gist.github.com/mrtantoine/417ee9b774f022bd747211b9eadc0069","label":"cve@mitre.org"},{"url":"https://github.com/mageplaza/magento-2-blog/tree/v4.3.2","label":"cve@mitre.org"}],"tags":["nvd","cve.org"],"epss":0.00277,"epssPercentile":0.20424,"ingestedAt":"2026-09-09T19:19:51.828Z","ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-09T19:25:27.121143Z"},"slug":"CVE-2026-79322","body":"## Overview\n\nSQL injection in the RelatedProduct block in Mageplaza Blog for Magento 2 (mageplaza/magento-2-blog-extension) through 4.3.2 allows remote unauthenticated attackers to execute arbitrary SQL commands and read arbitrary database contents via the id parameter to /mpblog/post/view.\n\n## Affected\n\n- `mageplaza_blog <= 4.3.2`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":47,"depthScoreParts":{"impact":47.3,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[{"seq":25003,"id":"CVE-2026-79322","ts":1788989017543,"field":"cvss","old":null,"new":"8.6"},{"seq":25002,"id":"CVE-2026-79322","ts":1788989017543,"field":"severity","old":"none","new":"high"}]}