EUVD-2026-95609

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in tagDiv tagDiv Opt-In Builder td-subscription allows Blind SQL Injection.This issue affects tagDiv Opt-In Builder: from n/a through 1.7.6...

CVE-2026-96328

The WordPress JNews - Pay Writer plugin (versions through 12.0.1 ) is vulnerable to a Blind SQL Injection flaw due to the Improper Neutralization of Special Elements used in an SQL Command . This vulnerability allows an attacker to execute unauthorized SQL queries. No specific exploit details or ...

EUVD-2026-95607

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in jegtheme JNews - Pay Writer jnews-pay-writer allows Blind SQL Injection.This issue affects JNews - Pay Writer: from n/a through 12.0.1...

EUVD-2026-95605

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Taskbuilder Taskbuilder taskbuilder allows Blind SQL Injection.This issue affects Taskbuilder: from n/a through 6.0.5...

CVE-2026-95599

The WordPress Taskbuilder plugin (versions

CVE-2026-96329 WordPress tagDiv Opt-In Builder plugin <= 1.7.6 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in tagDiv tagDiv Opt-In Builder td-subscription allows Blind SQL Injection.This issue affects tagDiv Opt-In Builder: from n/a through 1.7.6...

CVE-2026-95607 WordPress WPLMS theme <= 4.973 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in VibeThemes WPLMS wplms allows Blind SQL Injection.This issue affects WPLMS : from n/a through 4.973...

CVE-2026-96327 WordPress WPLMS plugin < 1.9.9.8.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in VibeThemes WPLMS wplmsplugin allows Blind SQL Injection.This issue affects WPLMS: from n/a before 1.9.9.8.2...

CVE-2026-96327

The VibeThemes WPLMS wplms_plugin for WordPress is vulnerable to Blind SQL Injection due to the improper neutralization of special elements used in SQL commands. This security flaw affects versions prior to 1.9.9.8.2 . Exploitation could lead to unauthorized access to the underlying database. No ...

EUVD-2026-95598

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in VibeThemes WPLMS wplmsplugin allows Blind SQL Injection.This issue affects WPLMS: from n/a before 1.9.9.8.2...

EUVD-2026-95599

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in VibeThemes WPLMS wplms allows Blind SQL Injection.This issue affects WPLMS : from n/a through 4.973...

CVE-2026-95607

The VibeThemes WPLMS WordPress theme (versions up to and including 4.973 ) is vulnerable to a Blind SQL Injection flaw. This vulnerability is caused by the improper neutralization of special elements used in an SQL command. The attack vector is network-based with low complexity , requiring low pr...

CVE-2026-95610 WordPress UpSolution Core plugin <= 9.3 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in UpSolution UpSolution Core us-core allows Blind SQL Injection.This issue affects UpSolution Core: from n/a through 9.3...

CVE-2026-95610

The UpSolution Core (us-core) WordPress plugin is vulnerable to a Blind SQL Injection flaw due to improper neutralization of special elements used in SQL commands. This issue affects versions through 9.3 . An attacker can exploit this vulnerability to perform unauthorized database queries. The do...

EUVD-2026-95596

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in UpSolution UpSolution Core us-core allows Blind SQL Injection.This issue affects UpSolution Core: from n/a through 9.3...

POC-CVE-2026-65971

CVE-2026-65971 — SQL Injection in Livewire PowerGrid via sortDirection Proof-of-concept and full technical write-up for CVE-2026-65971 / GHSA-7fgc-3h6c-698r , an SQL injection in power-components/livewire-powergrid reachable through the public Livewire property sortDirection. | ---|--- CVE|...

CVE-2026-52614

CVE-2026-52614 - RuoYi v4.8.3 filterKeyword Bypass SQL Injection 中文 | English Authorization required / 仅限授权测试 This repository is intended for security research and authorized testing only. Do not use it against systems without explicit permission. 本仓库仅用于安全研究与已获明确授权的测试。请勿对未授权系统使用。 中文说明 漏洞简介 RuoYi...

CVE-2026-69083_exploit

CVE-2026-69083 — SiYuan Unauthenticated SQL Injection Unauthenticated SQL injection in SiYuan a Go-based knowledge-base app via the asset-content search endpoint. POST /api/search/fullTextSearchAssetContent builds a raw SQL statement by concatenating the user-controlled query value straight into ...

CVE-2021-35042

CVE-2021-35042: Django SQL injection vulnerability I. Overview Django is an open-source Web Application Framework written in Python, built according to the MVC Model - View - Controller model. It was originally built to manage news content websites owned by the Lawrence publishing corporation, as...

Vulnerabilities in Splunk Enterprise

Splunk has identified several vulnerabilities in Splunk Enterprise. These vulnerabilities apply to various versions of Splunk Enterprise and include insufficient authorization checks in REST API endpoints, allowing unauthorized users to access privileged functions or sensitive data. Some of these...