260408 matches found
CVE-2026-96328 WordPress JNews - Pay Writer plugin <= 12.0.1 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in jegtheme JNews - Pay Writer jnews-pay-writer allows Blind SQL Injection.This issue affects JNews - Pay Writer: from n/a through 12.0.1...
CVE-2026-96330 WordPress tagDiv Opt-In Builder plugin <= 1.7.6 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in tagDiv tagDiv Opt-In Builder td-subscription allows Blind SQL Injection.This issue affects tagDiv Opt-In Builder: from n/a through 1.7.6...
CVE-2026-95599 WordPress Taskbuilder plugin <= 6.0.5 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Taskbuilder Taskbuilder taskbuilder allows Blind SQL Injection.This issue affects Taskbuilder: from n/a through 6.0.5...
CVE-2026-96329 WordPress tagDiv Opt-In Builder plugin <= 1.7.6 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in tagDiv tagDiv Opt-In Builder td-subscription allows Blind SQL Injection.This issue affects tagDiv Opt-In Builder: from n/a through 1.7.6...
CVE-2026-96328
The WordPress JNews - Pay Writer plugin (versions through 12.0.1 ) is vulnerable to a Blind SQL Injection flaw due to the Improper Neutralization of Special Elements used in an SQL Command . This vulnerability allows an attacker to execute unauthorized SQL queries. No specific exploit details or ...
EUVD-2026-95599
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in VibeThemes WPLMS wplms allows Blind SQL Injection.This issue affects WPLMS : from n/a through 4.973...
EUVD-2026-95598
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in VibeThemes WPLMS wplmsplugin allows Blind SQL Injection.This issue affects WPLMS: from n/a before 1.9.9.8.2...
CVE-2026-95607 WordPress WPLMS theme <= 4.973 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in VibeThemes WPLMS wplms allows Blind SQL Injection.This issue affects WPLMS : from n/a through 4.973...
CVE-2026-96327 WordPress WPLMS plugin < 1.9.9.8.2 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in VibeThemes WPLMS wplmsplugin allows Blind SQL Injection.This issue affects WPLMS: from n/a before 1.9.9.8.2...
CVE-2026-95607
The VibeThemes WPLMS WordPress theme (versions up to and including 4.973 ) is vulnerable to a Blind SQL Injection flaw. This vulnerability is caused by the improper neutralization of special elements used in an SQL command. The attack vector is network-based with low complexity , requiring low pr...
CVE-2026-96327
The VibeThemes WPLMS wplms_plugin for WordPress is vulnerable to Blind SQL Injection due to the improper neutralization of special elements used in SQL commands. This security flaw affects versions prior to 1.9.9.8.2 . Exploitation could lead to unauthorized access to the underlying database. No ...
EUVD-2026-95596
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in UpSolution UpSolution Core us-core allows Blind SQL Injection.This issue affects UpSolution Core: from n/a through 9.3...
CVE-2026-95610
The UpSolution Core (us-core) WordPress plugin is vulnerable to a Blind SQL Injection flaw due to improper neutralization of special elements used in SQL commands. This issue affects versions through 9.3 . An attacker can exploit this vulnerability to perform unauthorized database queries. The do...
CVE-2026-95610 WordPress UpSolution Core plugin <= 9.3 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in UpSolution UpSolution Core us-core allows Blind SQL Injection.This issue affects UpSolution Core: from n/a through 9.3...
POC-CVE-2026-65971
CVE-2026-65971 — Injection SQL dans Livewire PowerGrid via sortDirection Preuve de concept et analyse technique complète pour CVE-2026-65971 / GHSA-7fgc-3h6c-698r , une injection SQL dans power-components/livewire-powergrid accessible via la propriété Livewire publique sortDirection. | ---|--- CV...
CVE-2026-52614
CVE-2026-52614 - RuoYi v4.8.3 : contournement de filterKeyword par injection SQL 中文 | Anglais Autorisation requise / 仅限授权测试 Ce dépôt est destiné uniquement à la recherche en sécurité et aux tests autorisés. Ne l'utilisez pas contre des systèmes sans autorisation explicite...
CVE-2026-69083_exploit
CVE-2026-69083 — Injection SQL non authentifiée dans SiYuan Injection SQL non authentifiée dans SiYuan une application de base de connaissances basée sur Go via le point de terminaison de recherche du contenu des actifs. POST /api/search/fullTextSearchAssetContent construit une instruction SQL...
CVE-2021-35042
CVE-2021-35042: Vulnérabilité d'injection SQL dans Django I. Aperçu Django est un framework d'application Web open source, écrit en Python, construit selon le modèle MVC Model - View - Controller. Il a été initialement conçu pour gérer les sites Web de contenu d'actualités appartenant à la sociét...
Vulnerabilities in Splunk Enterprise
Splunk has identified several vulnerabilities in Splunk Enterprise. These vulnerabilities apply to various versions of Splunk Enterprise and include insufficient authorization checks in REST API endpoints, allowing unauthorized users to access privileged functions or sensitive data. Some of these...