284296 matches found
CVE-2026-66626 WordPress SKT Addons for Elementor plugin <= 4.0 - SQL Injection vulnerability
Editor SQL Injection in SKT Addons for Elementor = 4.0 versions...
CVE-2026-66626 WordPress SKT Addons for Elementor plugin <= 4.0 - SQL Injection vulnerability
Editor SQL Injection in SKT Addons for Elementor = 4.0 versions...
CVE-2026-66626
CVE-2026-66626 is an Editor SQL Injection vulnerability in the WordPress plugin SKT Addons for Elementor (versions ≤ 4.0 ), discovered by Ananda Dhakal via Patchstack. The flaw allows an authenticated user with high privileges to inject SQL through the editor functionality. The CVSS 3.1 score is ...
CVE-2026-66625
WC Vendors Marketplace , a WordPress plugin, is vulnerable to an administrator-level SQL injection in versions
EUVD-2026-81507
Administrator SQL Injection in WC Vendors Marketplace = 2.7.2.1 versions...
EUVD-2026-81508
Editor SQL Injection in SKT Addons for Elementor = 4.0 versions...
CVE-2026-66619 WordPress Newsletters plugin <= 4.18 - SQL Injection vulnerability
Administrator SQL Injection in Newsletters = 4.18 versions...
CVE-2026-66624 WordPress WPMasterToolKit plugin <= 2.22.0 - SQL Injection vulnerability
Administrator SQL Injection in WPMasterToolKit = 2.22.0 versions...
CVE-2026-66624 WordPress WPMasterToolKit plugin <= 2.22.0 - SQL Injection vulnerability
Administrator SQL Injection in WPMasterToolKit = 2.22.0 versions...
CVE-2026-66619 WordPress Newsletters plugin <= 4.18 - SQL Injection vulnerability
Administrator SQL Injection in Newsletters = 4.18 versions...
CVE-2026-66619
CVE-2026-66619 is an Administrator SQL Injection vulnerability in the WordPress Newsletters plugin , affecting versions 4.18 and below . The vulnerability was discovered by Ananda Dhakal via Patchstack. The CVSS 3.1 base score is 7.6 (HIGH) with a vector of AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L, in...
CVE-2026-66624
WPMasterToolKit , a WordPress plugin, is affected by an Administrator-level SQL Injection in versions ≤ 2.22.0 , discovered by Ananda Dhakal (Patchstack). The vulnerability carries a CVSS 3.1 score of 7.6 (HIGH) with a vector of AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L, indicating that a privileged (a...
EUVD-2026-81506
Administrator SQL Injection in WPMasterToolKit = 2.22.0 versions...
EUVD-2026-81505
Administrator SQL Injection in Newsletters = 4.18 versions...
CVE-2026-66618 WordPress WP Maps plugin <= 4.9.9 - SQL Injection vulnerability
Administrator SQL Injection in WP Maps = 4.9.9 versions...
EUVD-2026-81504
Administrator SQL Injection in WP Maps = 4.9.9 versions...
CVE-2026-66618
CVE-2026-66618 is an Administrator-level SQL Injection vulnerability in the WP Maps WordPress plugin, affecting versions 4.9.9 and below . The flaw was discovered by Ananda Dhakal (Patchstack) and carries a CVSS 3.1 score of 7.6 (HIGH) , with a vector of AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L , indi...
CVE-2026-66618 WordPress WP Maps plugin <= 4.9.9 - SQL Injection vulnerability
Administrator SQL Injection in WP Maps = 4.9.9 versions...