219411 matches found
CVE-2026-17191
CVE-2026-17191 is an input-validation vulnerability in the VeloCloud Orchestrator Flow Metrics API. An authenticated user can abuse the API component to manipulate backend queries, which may lead to unauthorized access to data beyond the user’s privileges and could trigger unintended outbound net...
CVE-2026-17191 VeloCloud Orchestrator Flow Metrics API SQL Injection
An input validation vulnerability exists in an API component of the orchestrator. An authenticated user can exploit this flaw to manipulate backend queries, which may result in unauthorized access to data beyond their intended privileges and cause the underlying system to initiate unintended...
CVE-2026-66427
Administrator SQL Injection in WP Google Review Slider = 18.4 versions...
CVE-2026-59550
Unauthenticated SQL Injection in AWP Classifieds = 4.4.7 versions...
CVE-2026-59538
Unauthenticated SQL Injection in GamiPress = 7.9.7 versions...
CVE-2026-59537
Administrator SQL Injection in Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce = 2.10.22 versions...
CVE-2026-65766
Joomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Builder 6.7.1 - Improper validation of order parameters in the Dynamic Content endpoint leads to an SQL injection vector...
CVE-2026-66427 WordPress WP Google Review Slider plugin <= 18.4 - SQL Injection vulnerability
Administrator SQL Injection in WP Google Review Slider = 18.4 versions...
CVE-2026-66427
Administrator SQL Injection in WP Google Review Slider = 18.4 versions...
CVE-2026-66427
Summary: CVE-2026-66427 affects the WordPress plugin “WP Google Review Slider” (
EUVD-2026-49220
Subscriber SQL Injection in rtMedia for WordPress, BuddyPress and bbPress = 4.7.10 versions...
CVE-2026-59551
Subscriber SQL Injection in rtMedia for WordPress, BuddyPress and bbPress = 4.7.10 versions...
CVE-2026-59550
Unauthenticated SQL Injection in AWP Classifieds = 4.4.7 versions...
CVE-2026-59549
Affected software: WordPress plugin rtMedia for WordPress, BuddyPress and bbPress (versions <= 4.7.10). Vulnerability: Unauthenticated SQL Injection. Root cause/impact: SQL injection that does not require authentication; CVSS metrics in the external record indicate high confidentiality impact ...
CVE-2026-59549
Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress = 4.7.10 versions...
CVE-2026-59550 WordPress AWP Classifieds plugin <= 4.4.7 - SQL Injection vulnerability
Unauthenticated SQL Injection in AWP Classifieds = 4.4.7 versions...
EUVD-2026-49219
Unauthenticated SQL Injection in AWP Classifieds = 4.4.7 versions...
CVE-2026-59550
CVE-2026-59550 affects the WordPress plugin AWP Classifieds (versions