219788 matches found
CVE-2026-28001
Unauthenticated SQL Injection in WP Directory Kit = 1.5.4 versions...
CVE-2026-27538
Unauthenticated SQL Injection in WP Directory Kit = 1.5.4 versions...
Pimcore: ClassDefinition UID regex missing end anchor allows SQL injection via Block.php unquoted table name
Summary A missing end anchor $ in the ClassDefinition UID validation regex allows an authenticated user with the objects permission to create a class with a malicious UID containing SQL. When a data object of that class is later loaded, Block.php concatenates the raw classId directly into a SQL...
EUVD-2026-57917
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Arraytics Booktics allows Blind SQL Injection. This issue affects Booktics: from n/a through 1.0.22...
CVE-2026-28002
CVE-2026-28002 affects the WordPress Booktics plugin up to version 1.0.22. The issue is an SQL Injection (blind) caused by improper neutralization of special elements in SQL commands, enabling potential unauthorized data access. No exploitation details or patches are provided in the documents; re...
CVE-2026-28002 WordPress Booktics plugin 1.0.22 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Arraytics Booktics allows Blind SQL Injection. This issue affects Booktics: from n/a through 1.0.22...
CVE-2026-28002
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Arraytics Booktics allows Blind SQL Injection. This issue affects Booktics: from n/a through 1.0.22...
EUVD-2026-57911
Administrator SQL Injection in MailChimp For WooCommerce 6.2 versions...
CVE-2026-73346 WordPress MailChimp For WooCommerce plugin < 6.2 - SQL Injection vulnerability
Administrator SQL Injection in MailChimp For WooCommerce 6.2 versions...
CVE-2026-73346
The CVE concerns the WordPress plugin MailChimp For WooCommerce (affected: versions
CVE-2026-66658
Subscriber SQL Injection in Reviewer = 3.14.2 versions...
CVE-2026-66658
CVE-2026-66658 affects WordPress Reviewer plugin versions ≤ 3.14.2. The issue is described as a SQL Injection vulnerability (Subscriber SQL Injection) with CVSS 3.1, base score 8.5 (HIGH), vector: NETWORK/attackVector N, AC:L, PR:L, UI:N, S:C, C:H, I:N, A:L. Connected sources include CVE records ...
CVE-2026-66658 WordPress Reviewer plugin <= 3.14.2 - SQL Injection vulnerability
Subscriber SQL Injection in Reviewer = 3.14.2 versions...
EUVD-2026-57897
Subscriber SQL Injection in Reviewer = 3.14.2 versions...
CVE-2026-66472 WordPress Everest Backup plugin <= 2.3.12 - SQL Injection vulnerability
Unauthenticated SQL Injection in Everest Backup = 2.3.12 versions...
CVE-2026-66478
The CVE 2026-66478 refers to an unauthenticated SQL Injection in the WordPress plugin Church Admin (versions
CVE-2026-66478
Unauthenticated SQL Injection in Church Admin = 5.1.1 versions...
EUVD-2026-57891
Unauthenticated SQL Injection in Church Admin = 5.1.1 versions...