CVE-2026-96328

The WordPress JNews - Pay Writer plugin (versions through 12.0.1 ) is vulnerable to a Blind SQL Injection flaw due to the Improper Neutralization of Special Elements used in an SQL Command . This vulnerability allows an attacker to execute unauthorized SQL queries. No specific exploit details or ...

CVE-2026-96329

The tagDiv Opt-In Builder WordPress plugin (versions up to and including 1.7.6 ) is vulnerable to a Blind SQL Injection flaw. This vulnerability is caused by the improper neutralization of special elements used in an SQL command within the td-subscription component. An attacker could potentially ...

CVE-2026-96330

The tagDiv Opt-In Builder WordPress plugin (versions n/a through 1.7.6 ) is vulnerable to a Blind SQL Injection flaw. The root cause is the Improper Neutralization of Special Elements used in an SQL Command within the td-subscription component. This vulnerability allows an attacker to execute mal...

CVE-2026-95599

The WordPress Taskbuilder plugin (versions

EUVD-2026-95598

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in VibeThemes WPLMS wplmsplugin allows Blind SQL Injection.This issue affects WPLMS: from n/a before 1.9.9.8.2...

EUVD-2026-95599

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in VibeThemes WPLMS wplms allows Blind SQL Injection.This issue affects WPLMS : from n/a through 4.973...

CVE-2026-96327 WordPress WPLMS plugin < 1.9.9.8.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in VibeThemes WPLMS wplmsplugin allows Blind SQL Injection.This issue affects WPLMS: from n/a before 1.9.9.8.2...

CVE-2026-95607 WordPress WPLMS theme <= 4.973 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in VibeThemes WPLMS wplms allows Blind SQL Injection.This issue affects WPLMS : from n/a through 4.973...

CVE-2026-96327

The VibeThemes WPLMS wplms_plugin for WordPress is vulnerable to Blind SQL Injection due to the improper neutralization of special elements used in SQL commands. This security flaw affects versions prior to 1.9.9.8.2 . Exploitation could lead to unauthorized access to the underlying database. No ...

CVE-2026-95607

The VibeThemes WPLMS WordPress theme (versions up to and including 4.973 ) is vulnerable to a Blind SQL Injection flaw. This vulnerability is caused by the improper neutralization of special elements used in an SQL command. The attack vector is network-based with low complexity , requiring low pr...

EUVD-2026-95596

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in UpSolution UpSolution Core us-core allows Blind SQL Injection.This issue affects UpSolution Core: from n/a through 9.3...

CVE-2026-95610 WordPress UpSolution Core plugin <= 9.3 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in UpSolution UpSolution Core us-core allows Blind SQL Injection.This issue affects UpSolution Core: from n/a through 9.3...

CVE-2026-95610

The UpSolution Core (us-core) WordPress plugin is vulnerable to a Blind SQL Injection flaw due to improper neutralization of special elements used in SQL commands. This issue affects versions through 9.3 . An attacker can exploit this vulnerability to perform unauthorized database queries. The do...

Vulnerabilities in Splunk Enterprise

Splunk has identified several vulnerabilities in Splunk Enterprise. These vulnerabilities apply to various versions of Splunk Enterprise and include insufficient authorization checks in REST API endpoints, allowing unauthorized users to access privileged functions or sensitive data. Some of these...

CVE-2026-106097

The Code Snippets WordPress plugin before 3.10.0 does not sanitise and escape a user-supplied parameter before using it in a SQL query in some of its snippet-migration import endpoints, which are accessible to any user holding site-administration capabilities; on a WordPress Multisite network tho...

CVE-2026-106097

The Code Snippets WordPress plugin versions prior to 3.10.0 is vulnerable to a UNION-based SQL injection due to insufficient sanitization and escaping of user-supplied parameters in specific snippet-migration import endpoints . This vulnerability is accessible to any user with site-administration...

CVE-2026-106097 Code Snippets < 3.10.0 - Admin+ SQLi in Migration Importers Leading to Network-Wide Credential Disclosure (Multisite)

The Code Snippets WordPress plugin before 3.10.0 does not sanitise and escape a user-supplied parameter before using it in a SQL query in some of its snippet-migration import endpoints, which are accessible to any user holding site-administration capabilities; on a WordPress Multisite network tho...

EUVD-2026-95507

The Code Snippets WordPress plugin before 3.10.0 does not sanitise and escape a user-supplied parameter before using it in a SQL query in some of its snippet-migration import endpoints, which are accessible to any user holding site-administration capabilities; on a WordPress Multisite network tho...

naxsi

Estado del Proyecto Esta es una actualización del estado del proyecto sobre Naxsi. Como habrán notado, el desarrollo de Naxsi se ha detenido y el repositorio será archivado por razones históricas. Esto significa que no se publicarán nuevas actualizaciones ni correcciones de errores para esta...

blind-sql-bitshifting

Inyección SQL Ciega mediante Desplazamiento de Bits Este es un módulo que realiza inyección SQL ciega utilizando el método de desplazamiento de bits para calcular caracteres en lugar de adivinarlos. Requiere 7/8 solicitudes por carácter, dependiendo de la configuración. Uso import...