222307 matches found
CVE-2026-54812
CVE-2026-54812 describes an SQL Injection in StylemixThemes Motors (WordPress plugin)
WordPress GeoDirectory plugin <= 2.8.162 - SQL Injection vulnerability
SQL Injection vulnerability discovered by manop55555 in WordPress Plugin GeoDirectory versions = 2.8.162...
CVE-2026-54813
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Brainstorm Force SureDash allows Blind SQL Injection. This issue affects SureDash: from n/a through 1.8.0...
CVE-2026-54815
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Cargo RD Cargo Shipping Location for WooCommerce allows Blind SQL Injection. This issue affects Cargo Shipping Location for WooCommerce: from n/a through 5.6...
CVE-2025-59554
Unauthenticated SQL Injection in Advanced Ads – Tracking 3.0.7 versions...
WordPress WP Photo Album Plus plugin <= 9.1.13.005 - SQL Injection vulnerability
SQL Injection vulnerability discovered by daroo in WordPress Plugin WP Photo Album Plus versions = 9.1.13.005...
WordPress Real Estate 7 theme <= 3.5.9 - SQL Injection vulnerability
SQL Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Real Estate 7 versions = 3.5.9...
CVE-2026-54815 WordPress Cargo Shipping Location for WooCommerce plugin <= 5.6 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Cargo RD Cargo Shipping Location for WooCommerce allows Blind SQL Injection. This issue affects Cargo Shipping Location for WooCommerce: from n/a through 5.6...
CVE-2026-54815
CVE-2026-54815 affects the WordPress plugin Cargo Shipping Location for WooCommerce (Cargo RD Cargo Shipping Location for WooCommerce) up to version 5.6. The vulnerability is an SQL Injection (blind) caused by improper neutralization of special elements in SQL commands. CVSS v3.1 shows a base sco...
CVE-2026-54818 WordPress Slimstat Analytics plugin <= 5.4.11 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in VeronaLabs Slimstat Analytics allows Blind SQL Injection. This issue affects Slimstat Analytics: from n/a through 5.4.11...
CVE-2026-54818
The CVE concerns WordPress Slimstat Analytics plugin (versions up to 5.4.11). The issue is a SQL Injection vulnerability caused by improper neutralization of SQL commands, enabling blind SQL injection. The CVSS 3.1 base score is 8.5 (HIGH) with network exploitability, low attack complexity, and n...
WordPress wpDataTables plugin <= 7.4 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Expatch in WordPress Plugin wpDataTables versions = 7.4...
CVE-2026-54811
Unauthenticated SQL Injection in WP eMember v10.9.4 versions...
CVE-2026-54186
Unauthenticated SQL Injection in JobSearch = 3.2.9 versions...
CVE-2026-49084
Unauthenticated SQL Injection in JetEngine 3.8.9.1 versions...
CVE-2026-49080
Unauthenticated SQL Injection in wpDataTables = 7.3.6 versions...
CVE-2026-49076
Unauthenticated SQL Injection in JetEngine = 3.8.9.1 versions...
CVE-2026-39596
Unauthenticated SQL Injection in Blocksy Companion Pro 2.1.29 versions...