SQL Injection Vulnerability (CVE-2026-16061) Found in Rest Routes WordPress Plugin

NIST has released information on CVE-2026-16061, detailing a SQL injection vulnerability in the Rest Routes WordPress plugin (through version 5.5.5). This flaw enables unauthenticated attackers to perform SQL injection attacks by exploiting improper sanitization and validation of a value from its public REST routes.