284197 matches found
CVE-2026-66630
SQL Injection vulnerability in the WordPress PublishPress Series plugin (versions ≤ 3.1.3 ), discovered by Ananda Dhakal via Patchstack . The flaw requires administrator-level privileges but changes scope, allowing an authenticated admin to inject SQL and achieve high confidentiality impact and l...
CVE-2026-66631 WordPress MC Woocommerce Wishlist plugin <= 1.9.21 - SQL Injection vulnerability
Administrator SQL Injection in MC Woocommerce Wishlist = 1.9.21 versions...
EUVD-2026-81510
Administrator SQL Injection in PublishPress Series = 3.1.3 versions...
CVE-2026-66630 WordPress PublishPress Series plugin <= 3.1.3 - SQL Injection vulnerability
Administrator SQL Injection in PublishPress Series = 3.1.3 versions...
EUVD-2026-81511
Administrator SQL Injection in MC Woocommerce Wishlist = 1.9.21 versions...
CVE-2026-66631
CVE-2026-66631 affects the MC Woocommerce Wishlist WordPress plugin (plugin slug: smart-wishlist-for-more-convert ) in versions
CVE-2026-66631 WordPress MC Woocommerce Wishlist plugin <= 1.9.21 - SQL Injection vulnerability
Administrator SQL Injection in MC Woocommerce Wishlist = 1.9.21 versions...
CVE-2026-66628 WordPress WP-Lister Lite for eBay plugin <= 3.8.11 - SQL Injection vulnerability
Shop manager SQL Injection in WP-Lister Lite for eBay = 3.8.11 versions...
CVE-2026-66628 WordPress WP-Lister Lite for eBay plugin <= 3.8.11 - SQL Injection vulnerability
Shop manager SQL Injection in WP-Lister Lite for eBay = 3.8.11 versions...
EUVD-2026-81509
Shop manager SQL Injection in WP-Lister Lite for eBay = 3.8.11 versions...
CVE-2026-66628
A SQL Injection vulnerability was identified in the shop manager functionality of the WordPress plugin WP-Lister Lite for eBay , affecting versions
CVE-2026-66625 WordPress WC Vendors Marketplace plugin <= 2.7.2.1 - SQL Injection vulnerability
Administrator SQL Injection in WC Vendors Marketplace = 2.7.2.1 versions...
CVE-2026-66626 WordPress SKT Addons for Elementor plugin <= 4.0 - SQL Injection vulnerability
Editor SQL Injection in SKT Addons for Elementor = 4.0 versions...
CVE-2026-66626 WordPress SKT Addons for Elementor plugin <= 4.0 - SQL Injection vulnerability
Editor SQL Injection in SKT Addons for Elementor = 4.0 versions...
CVE-2026-66625
WC Vendors Marketplace , a WordPress plugin, is vulnerable to an administrator-level SQL injection in versions
EUVD-2026-81507
Administrator SQL Injection in WC Vendors Marketplace = 2.7.2.1 versions...
CVE-2026-66625 WordPress WC Vendors Marketplace plugin <= 2.7.2.1 - SQL Injection vulnerability
Administrator SQL Injection in WC Vendors Marketplace = 2.7.2.1 versions...
CVE-2026-66626
CVE-2026-66626 is an Editor SQL Injection vulnerability in the WordPress plugin SKT Addons for Elementor (versions ≤ 4.0 ), discovered by Ananda Dhakal via Patchstack. The flaw allows an authenticated user with high privileges to inject SQL through the editor functionality. The CVSS 3.1 score is ...