Unauthenticated SQL Injection in GeekyBot <= 1.2.5 versions.

CVE-2026-57679 describes an unauthenticated SQL injection vulnerability affecting the GeekyBot WordPress plugin in versions 1.2.5 and below. The vulnerability allows unauthenticated attackers to inject malicious SQL queries, potentially leading to unauthorized database access, data exfiltration, or manipulation. No authentication is required to exploit this flaw, making it particularly dangerous on publicly accessible WordPress installations. The issue was documented by both the NVD and Patchstack, a known WordPress security tracking service. Users of the GeekyBot plugin are advised to update to a patched version immediately. SQL injection vulnerabilities of this type are considered high severity due to the potential for complete database compromise.