CVE-2026-61969

CVE-2026-61969 concerns an unauthenticated SQL injection in the WordPress Listdom plugin. Affected: Listdom ≤ 5.6.0. Root cause: likely improper handling of input in a database query, enabling SQL injection without authentication. Impact (per CVSS): high confidentiality impact, low availability i...

CVE-2026-61966 WordPress WPJAM Basic plugin <= 7.0.1 - SQL Injection vulnerability

Subscriber SQL Injection in WPJAM Basic = 7.0.1 versions...

EUVD-2026-57971

Subscriber SQL Injection in WPJAM Basic = 7.0.1 versions...

CVE-2026-61966

Subscriber SQL Injection in WPJAM Basic = 7.0.1 versions...

CVE-2026-61966

CVE-2026-61966 : Affected software is the WordPress WPJAM Basic plugin in versions ≤ 7.0.1. The vulnerability is a Subscriber SQL Injection in WPJAM Basic, with the underlying issue described across connected sources. The CVSS 3.1 base score is 9.3 (CRITICAL), with network attack vector, low atta...

CVE-2026-28184

...

CVE-2026-28184 WordPress Form Maker by 10Web plugin <= 1.15.44 - SQL Injection vulnerability

Subscriber SQL Injection in Form Maker by 10Web = 1.15.44 versions...

EUVD-2026-57962

Subscriber SQL Injection in Form Maker by 10Web = 1.15.44 versions...

CVE-2026-28184

This CVE ID is rejected and not an active vulnerability entry.

CVE-2026-28184

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2026-28168 WordPress CubeWP plugin <= 1.1.30 - SQL Injection vulnerability

Subscriber SQL Injection in CubeWP = 1.1.30 versions...

CVE-2026-28168

Subscriber SQL Injection in CubeWP = 1.1.30 versions...

CVE-2026-28168

CVE-2026-28168 affects the WordPress CubeWP plugin up to version 1.1.30. The issue is described as a Subscriber SQL Injection vulnerability, with CVSS 3.1 base score 8.5 (HIGH ) and a Network attack vector, Low attack complexity, privileges required, no user interaction, and scope Changed with Co...

EUVD-2026-57954

Subscriber SQL Injection in CubeWP = 1.1.30 versions...

CVE-2026-28156 WordPress Do Lasso plugin <= 358 - SQL Injection vulnerability

Subscriber SQL Injection in Do Lasso = 358 versions...

EUVD-2026-57949

Subscriber SQL Injection in Do Lasso = 358 versions...

CVE-2026-28156

CVE-2026-28156 pertains to the WordPress Do Lasso plugin

CVE-2026-28156

Subscriber SQL Injection in Do Lasso = 358 versions...

EUVD-2026-57945

Unauthenticated SQL Injection in Web Directory Free = 1.7.13 versions...

CVE-2026-28142

The CVE describes an Unauthenticated SQL Injection in the WordPress plugin Web Directory Free for versions up to 1.7.13 . Root cause details are not explicitly provided in the documents beyond the vulnerability type, but the CVSS v3.1 base score is 9.3 (CRITICAL) with high impact on confidentiali...