110260 matches found
CVE-2026-103229
The AdithyaYelloju Restaurant-Management-System is vulnerable to an SQL injection within the Unauthenticated Action Script component. The flaw exists in the mysqli_query function of the admin/delete1.php file, where an attacker can manipulate the ID argument to execute arbitrary SQL commands. Thi...
CVE-2026-103229 AdithyaYelloju Restaurant-Management-System Unauthenticated Action Script delete1.php mysqli_query sql injection
A vulnerability was found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This issue affects the function mysqliquery of the file admin/delete1.php of the component Unauthenticated Action Script. Performing a manipulation of the argument ID results i...
EUVD-2026-89995
Joomla Extension - ordasoft.com - Unauthenticated Remote Code Execution in OrdaSoft Joomla CCK 8.3.16 - site/uploader.php is reached through the component’s normal frontend routing task=getContent, a task with no authentication or ACL check anywhere in the dispatch chain. The handler validates th...
CVE-2026-102427 Joomla Extension - ordasoft.com - Unauthenticated Remote Code Execution in OrdaSoft Joomla CCK < 8.3.16
Joomla Extension - ordasoft.com - Unauthenticated Remote Code Execution in OrdaSoft Joomla CCK 8.3.16 - site/uploader.php is reached through the component’s normal frontend routing task=getContent, a task with no authentication or ACL check anywhere in the dispatch chain. The handler validates th...
WordPress EWWW Image Optimizer plugin 8.6.0 - 8.7.7 - Author+ PHP Object Injection vulnerability
WordPress EWWW Image Optimizer plugin 8.6.0 - 8.7.7 - Author+ PHP Object Injection vulnerability discovered by Karthik in WordPress Plugin EWWW Image Optimizer versions 8.6.0-8.7.7...
WordPress Extra Product Options For WooCommerce | Custom Product Addons and Fields plugin <= 3.3.8 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Extra Product Options For WooCommerce | Custom Product Addons and Fields versions = 3.3.8...
CVE-2026-97248
Unauthenticated PHP Object Injection in Booking Activities = 1.18.7.1 versions...
CVE-2026-97246
Subscriber PHP Object Injection in ShortPixel Image Optimizer = 6.5.5 versions...
CVE-2026-96833
Editor PHP Object Injection in Ultimate Addons for Contact Form 7 = 3.5.51 versions...
CVE-2026-96832
Shop manager PHP Object Injection in Content Egg = 6.3.1 versions...
CVE-2026-96831
Contributor PHP Object Injection in Themify Builder = 7.8.1 versions...
CVE-2026-96343
Custom role PHP Object Injection in WP ERP = 1.17.9 versions...
CVE-2026-96344
Custom role PHP Object Injection in eCommerce Product Catalog = 3.6.0 versions...
CVE-2026-95531
Subscriber PHP Object Injection in Conversational Forms for ChatBot = 1.5.0 versions...
CVE-2026-94678
Contributor PHP Object Injection in Go Live Update Urls = 7.0.8 versions...
CVE-2026-94683
Contributor PHP Object Injection in DesignSetGo = 2.8.0 versions...
CVE-2026-94677
Shop manager PHP Object Injection in Kadence WooCommerce Email Designer = 1.5.19.1 versions...
CVE-2026-94121
Contributor PHP Object Injection in 10Web Booster – Website speed optimization, Cache & Page Speed optimizer = 2.33.6 versions...