Hosts vulnerable to CVE-2026-60137
CVE-2026-60137 — severity medium, CVSS 5.9 — 10 affected hosts indexed by QROS Explore.
About CVE-2026-60137
WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the author__not_in parameter of WP_Query, which could allow SQL Injection when a plugin or theme passes untrusted input to the parameter.
Showing 10 of 10 hosts, ranked by risk score.
1630865.cloudwaysapps.com (24.199.102.119)
United States · Santa Clara
3 open ports · 23 CVE · risk 98/100 · critical
http, ssh
www.akselipalen.com (37.139.21.211)
The Netherlands · Amsterdam
3 open ports · 31 CVE · risk 98/100 · critical
http, ssh
tvmaxsa.com.py (45.55.133.200)
United States · Clifton
3 open ports · 91 CVE · risk 98/100 · critical
http, ssh
24.144.86.224
United States · Santa Clara
2 open ports · 67 CVE · risk 98/100 · critical
http, ssh
fafa123a.org (45.55.247.57)
United States · Clifton
3 open ports · 19 CVE · risk 98/100 · critical
http, ssh
act.vikkigoodwin.com (45.55.101.216)
United States · Secaucus
3 open ports · 23 CVE · risk 98/100 · critical
http, ssh
587231.cloudwaysapps.com (46.101.94.67)
United Kingdom · Kingston upon Thames
3 open ports · 29 CVE · risk 98/100 · critical
http, ssh
bowmanandpoole.com (46.101.23.118)
United Kingdom · Slough
3 open ports · 23 CVE · risk 98/100 · critical
http, ssh
burnzine.com (45.55.91.193)
United States · Clifton
3 open ports · 23 CVE · risk 98/100 · critical
http, ssh
ezcarrierusa.com (45.55.249.205)
United States · Clifton
3 open ports · 23 CVE · risk 98/100 · critical
http, ssh
Search all CVE-2026-60137 hosts in Explore
Open in Explore →