219310 matches found
CVE-2026-61966
Subscriber SQL Injection in WPJAM Basic = 7.0.1 versions...
EUVD-2026-57971
Subscriber SQL Injection in WPJAM Basic = 7.0.1 versions...
CVE-2026-61966
CVE-2026-61966 : Affected software is the WordPress WPJAM Basic plugin in versions ≤ 7.0.1. The vulnerability is a Subscriber SQL Injection in WPJAM Basic, with the underlying issue described across connected sources. The CVSS 3.1 base score is 9.3 (CRITICAL), with network attack vector, low atta...
CVE-2026-28184 WordPress Form Maker by 10Web plugin <= 1.15.44 - SQL Injection vulnerability
Subscriber SQL Injection in Form Maker by 10Web = 1.15.44 versions...
CVE-2026-28184
Subscriber SQL Injection in Form Maker by 10Web = 1.15.44 versions...
EUVD-2026-57962
Subscriber SQL Injection in Form Maker by 10Web = 1.15.44 versions...
CVE-2026-28184
CVE-2026-28184 affects the WordPress plugin Form Maker by 10Web, with versions
CVE-2026-28168 WordPress CubeWP plugin <= 1.1.30 - SQL Injection vulnerability
Subscriber SQL Injection in CubeWP = 1.1.30 versions...
CVE-2026-28168
Subscriber SQL Injection in CubeWP = 1.1.30 versions...
CVE-2026-28168
CVE-2026-28168 affects the WordPress CubeWP plugin up to version 1.1.30. The issue is described as a Subscriber SQL Injection vulnerability, with CVSS 3.1 base score 8.5 (HIGH ) and a Network attack vector, Low attack complexity, privileges required, no user interaction, and scope Changed with Co...
EUVD-2026-57954
Subscriber SQL Injection in CubeWP = 1.1.30 versions...
CVE-2026-28156 WordPress Do Lasso plugin <= 358 - SQL Injection vulnerability
Subscriber SQL Injection in Do Lasso = 358 versions...
CVE-2026-28156
Subscriber SQL Injection in Do Lasso = 358 versions...
EUVD-2026-57949
Subscriber SQL Injection in Do Lasso = 358 versions...
CVE-2026-28156
CVE-2026-28156 pertains to the WordPress Do Lasso plugin
CVE-2026-28142
Unauthenticated SQL Injection in Web Directory Free = 1.7.13 versions...
EUVD-2026-57945
Unauthenticated SQL Injection in Web Directory Free = 1.7.13 versions...
CVE-2026-28142
The CVE describes an Unauthenticated SQL Injection in the WordPress plugin Web Directory Free for versions up to 1.7.13 . Root cause details are not explicitly provided in the documents beyond the vulnerability type, but the CVSS v3.1 base score is 9.3 (CRITICAL) with high impact on confidentiali...