Security Bulletin: Multiple vulnerabilities in PostgreSQL affect PowerVM VIOS

Summary Vulnerabilities in PostgreSQL could allow Memory Corruption/Arbitrary Code Execution CVE-2026-14662, CVE-2026-14664, CVE-2026-14669, CVE-2026-14670, CVE-2026-14671, CVE-2026-14677, CVE-2026-14679, CVE-2026-14680, CVE-2026-15742, CVE-2026-16239, CVE-2026-19385, Information Disclosure...

WordPress Events Manager plugin <= 7.4.6 - SQL Injection vulnerability

SQL Injection vulnerability discovered by neurotx in WordPress Plugin Events Manager versions = 7.4.6...

CVE-2026-4889

SQL injection SQLi vulnerability in the eLoanApp application, specifically in the POST parameter 'logina' of the user process endpoint '/ajax/users.php?op=verify'. The parameter is vulnerable to boolean-based and time-based SQL injection. Successfully exploiting this vulnerability would allow an...

CVE-2026-42414

Subscriber SQL Injection in ListingPro = 2.9.12 versions...

CVE-2026-42417

Unauthenticated SQL Injection in ARMember Premium = 7.8 versions...

CVE-2026-42415

Unauthenticated SQL Injection in Porto Theme - Functionality = 3.9.3 versions...

CVE-2026-42416

Subscriber SQL Injection in UDesign Core = 4.15.0 versions...

CVE-2026-41555

Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email = 1.5.9 versions...

CVE-2026-39795

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in brewlabs SendPress Newsletters sendpress allows Blind SQL Injection.This issue affects SendPress Newsletters: from n/a through 1.26.1.20...

CVE-2026-39785

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Serhii Pasyuk Gmedia Photo Gallery grand-media allows Blind SQL Injection.This issue affects Gmedia Photo Gallery: from n/a through 1.25.1...

CVE-2026-39771

Subscriber SQL Injection in Buddyboss Platform = 3.1.0 versions...

CVE-2026-39764

Unauthenticated SQL Injection in Radius Booking — Booking Calendar for Appointments & Services = 1.0.19 versions...

CVE-2026-39747

Subscriber SQL Injection in Woffice = 5.4.35 versions...

CVE-2026-39746

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Booknetic Booknetic booknetic allows Blind SQL Injection.This issue affects Booknetic: from n/a before 5.10.3...

CVE-2026-32581

Subscriber SQL Injection in Mooberry Book Manager 4.16.2 versions...

CVE-2026-32580

Unauthenticated SQL Injection in WooCommerce Lottery = 2.2.9 versions...

CVE-2026-32557

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BookingWP WooCommerce Appointments woocommerce-appointments allows Blind SQL Injection.This issue affects WooCommerce Appointments: from n/a through 5.3.2...

CVE-2026-105317

Subscriber SQL Injection in Paid Member Subscriptions = 3.1.1 versions...

CVE-2026-25434

Subscriber SQL Injection in WP2LEADS = 3.5.7 versions...

CVE-2026-105317 WordPress Paid Member Subscriptions plugin <= 3.1.1 - SQL Injection vulnerability

Subscriber SQL Injection in Paid Member Subscriptions = 3.1.1 versions...