CVE-2026-5028 | 10up Eight Day Week Print Workflow Plugin up to 1.2.6 on WordPress AJAX Action pp-get-articles Title sql injection

A vulnerability was found in 10up Eight Day Week Print Workflow Plugin up to 1.2.6 on WordPress. It has been declared as critical. This affects the function pp-get-articles of the component AJAX Action Handler. Such manipulation of the argument Title leads to sql injection.

This vulnerability is uniquely identified as CVE-2026-5028. The attack can be launched remotely. No exploit exists.