
Vulnerabilities
e107 CMS Patched Critical Unauthenticated SQL Injection in Alt Auth Plugin
e107 version 2.3.7 fixes a critical flaw allowing unauthenticated attackers to inject SQL via the alt_auth plugin’s database backends.
Everything Threat Times has reported about e107: 2 stories, newest first. Part of our Vulnerabilities coverage.

e107 version 2.3.7 fixes a critical flaw allowing unauthenticated attackers to inject SQL via the alt_auth plugin’s database backends.

Version 2.3.7 addresses CVE-2026-55573, a critical vulnerability allowing attackers to execute arbitrary PHP code via the installer.