CVE-2026-42717 WordPress Leyka plugin <= 3.32.3 - SQL Injection vulnerability

Administrator SQL Injection in Leyka = 3.32.3 versions...

EUVD-2026-96449

Administrator SQL Injection in Leyka = 3.32.3 versions...

CVE-2026-42717 WordPress Leyka plugin <= 3.32.3 - SQL Injection vulnerability

Administrator SQL Injection in Leyka = 3.32.3 versions...

CVE-2026-42717

The WordPress Leyka plugin (versions

CVE-2026-42712 WordPress Qode Tours plugin <= 3.1.3.2 - SQL Injection vulnerability

Subscriber SQL Injection in Qode Tours = 3.1.3.2 versions...

EUVD-2026-96446

Subscriber SQL Injection in Qode Tours = 3.1.3.2 versions...

CVE-2026-42712 WordPress Qode Tours plugin <= 3.1.3.2 - SQL Injection vulnerability

Subscriber SQL Injection in Qode Tours = 3.1.3.2 versions...

CVE-2026-42712

The Qode Tours WordPress plugin (versions

CVE-2026-42633 WordPress Events Manager plugin <= 7.4.6 - SQL Injection vulnerability

Subscriber SQL Injection in Events Manager = 7.4.6 versions...

EUVD-2026-96435

Subscriber SQL Injection in Events Manager = 7.4.6 versions...

CVE-2026-42633 WordPress Events Manager plugin <= 7.4.6 - SQL Injection vulnerability

Subscriber SQL Injection in Events Manager = 7.4.6 versions...

CVE-2026-42633

The WordPress Events Manager plugin (versions

CVE-2026-40800 WordPress ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes plugin <= 1.5.3 - SQL Injection vulnerability

Subscriber SQL Injection in ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes = 1.5.3 versions...

CVE-2026-40800 WordPress ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes plugin <= 1.5.3 - SQL Injection vulnerability

Subscriber SQL Injection in ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes = 1.5.3 versions...

CVE-2026-40800

The ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes plugin for WordPress, versions

EUVD-2026-96537

Subscriber SQL Injection in ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes = 1.5.3 versions...

CVE-2026-105889

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Tickera Tickera tickera-event-ticketing-system allows Blind SQL Injection.This issue affects Tickera: from n/a through 3.6.0.6...

CVE-2026-105889

The Tickera tickera-event-ticketing-system WordPress plugin (versions ≤ 3.6.0.6 ) is vulnerable to Blind SQL Injection due to the Improper Neutralization of Special Elements used in an SQL Command. This vulnerability allows an attacker to execute arbitrary SQL commands, potentially leading to a h...

EUVD-2026-96381

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Tickera Tickera tickera-event-ticketing-system allows Blind SQL Injection.This issue affects Tickera: from n/a through 3.6.0.6...

CVE-2026-105889 WordPress Tickera plugin <= 3.6.0.6 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Tickera Tickera tickera-event-ticketing-system allows Blind SQL Injection.This issue affects Tickera: from n/a through 3.6.0.6...