GO-2026-6621 SiYuan: Unauthenticated SQL injection in searchDocs via unescaped keyword (publish mode): cross-notebook read/write with statement stacking in github.com/siyuan-note/siyuan/kernel

SiYuan: Unauthenticated SQL injection in searchDocs via unescaped keyword publish mode: cross-notebook read/write with statement stacking in github.com/siyuan-note/siyuan/kernel...

CVE-2024-43917

CVE-2024-43917 يوضح هذا السكربت ثغرة حقن SQL SQL Injection اكتُشفت في إضافة TI WooCommerce Wishlist الخاصة بووردبريس، في الإصدارات حتى 2.8.2 CVE-2024-43917. تسمح الثغرة للمستخدمين غير المُصادَق عليهم بتنفيذ أوامر SQL عشوائية على قاعدة بيانات الموقع، مما قد يعرّض معلومات حساسة مثل أسماء المستخدمين...

CVE-2024-8275

CVE-2024-8275 CVE-2024-8275 هي ثغرة حقن SQL حرجة تم اكتشافها في إضافة The Events Calendar الخاصة بووردبريس. تؤثر هذه الثغرة على الإصدارات حتى 6.6.4 وما دونها. تنشأ المشكلة من عدم كفاية تهريب معامل 'order' في دالة tribehasnextevent. نظرًا لأن الإدخال لا يتم تطهيره بشكل صحيح، يمكن للمهاجمين غير...

WordPress Qode Tours plugin <= 3.1.3.2 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Rafie Muhammad in WordPress Plugin Qode Tours versions = 3.1.3.2...

CVE-2026-42710

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in 10Web Slider by 10Web slider-wd allows Blind SQL Injection.This issue affects Slider by 10Web: from n/a through 1.2.63...

CVE-2026-42708

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AF themes WP Post Author wp-post-author allows Blind SQL Injection.This issue affects WP Post Author: from n/a through 4.0.0...

WordPress WP Ultimate CSV Importer plugin <= 9.2 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WP Ultimate CSV Importer versions = 9.2...

CVE-2026-42708

The WP Post Author plugin by AF themes (versions through 4.0.0 ) is vulnerable to Blind SQL Injection due to the improper neutralization of special elements used in an SQL command (CWE-89 ). Exploitation of this flaw allows an attacker to execute unauthorized SQL queries. No specific remediation ...

CVE-2026-42708 WordPress WP Post Author plugin <= 4.0.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AF themes WP Post Author wp-post-author allows Blind SQL Injection.This issue affects WP Post Author: from n/a through 4.0.0...

EUVD-2026-94303

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AF themes WP Post Author wp-post-author allows Blind SQL Injection.This issue affects WP Post Author: from n/a through 4.0.0...

CVE-2026-42708 WordPress WP Post Author plugin <= 4.0.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AF themes WP Post Author wp-post-author allows Blind SQL Injection.This issue affects WP Post Author: from n/a through 4.0.0...

WordPress WP Post Author plugin <= 4.0.0 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WP Post Author versions = 4.0.0...

CVE-2026-42710 WordPress Slider by 10Web plugin <= 1.2.63 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in 10Web Slider by 10Web slider-wd allows Blind SQL Injection.This issue affects Slider by 10Web: from n/a through 1.2.63...

CVE-2026-42710

The Slider by 10Web WordPress plugin (component: slider-wd ) is vulnerable to a Blind SQL Injection due to the improper neutralization of special elements used in an SQL command. This vulnerability affects versions from n/a through 1.2.63 . An attacker with high privileges could potentially explo...

CVE-2026-42710 WordPress Slider by 10Web plugin <= 1.2.63 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in 10Web Slider by 10Web slider-wd allows Blind SQL Injection.This issue affects Slider by 10Web: from n/a through 1.2.63...

EUVD-2026-94302

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in 10Web Slider by 10Web slider-wd allows Blind SQL Injection.This issue affects Slider by 10Web: from n/a through 1.2.63...

WordPress Slider by 10Web plugin <= 1.2.63 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Slider by 10Web versions = 1.2.63...

WordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.13.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by she11f in WordPress Plugin Barcode Scanner with Inventory & Order Manager versions = 1.13.1...

CVE-2019-9053-POC

CMS Made Simple ⚠️ إخلاء مسؤولية: هذا النص البرمجي مخصص للاستخدام التعليمي والاختبار المصرح به فقط. لا تستخدمه على أنظمة لا تملكها أو ليس لديك إذن صريح لاختبارها. المؤلف والمساهمون غير مسؤولين عن أي إساءة استخدام أو ضرر ناتج عن هذه الأداة. 🎯 ما هذا؟ هذا نص برمجي لاستغلال الثغرات الأمنية مكتوب بلغة...

CVE-2025-55575

smm-panel-sqliCVE-2025-55575 كشف حقن SQL المستند إلى الزمن للوحة SMM نظرة عامة يكشف هذا القالب عن ثغرة حقن SQL المستند إلى الزمن في المعامل servicedetail في لوحة SMM عبر طلبات HTTP POST إلى /ajaxdata. يمكن أن يسمح الاستغلال للمهاجمين عن بعد بالوصول إلى بيانات حساسة أو تصعيد الامتيازات. المؤلف:...