CVE-2026-39492

CVE-2026-39492 — WP Maps 블라인드 SQL 인젝션 스캐너 인증 없이 백틱 우회를 통한 시간 기반 블라인드 SQLi → DB 추출 개요 CVE-2026-39492 는 WP Maps 플러그인wp-google-map-plugin 버전 ≤ 4.9.1 에서 발견된 심각도CVSS 9.3의 인증되지 않은 블라인드 SQL 인젝션 취약점입니다. wpgmpajaxcall AJAX 핸들러는 wpajaxnopriv를 통해 인증되지 않은 접근에 등록됩니다. locationid 매개변수는...

CVE-2026-60137

wpsqli - WordPress SQLiエクストラクタ CVE-2026-60137 WordPressコアのauthornotin SQLインジェクション脆弱性を悪用する、メニュー駆動型の高速データベース抽出ツールです。このツールはデータベースの列挙とダンプに特化しており、RESTバッチルート混乱 CVE-2026-63030 を利用して未認証でSQLiシンクに到達します。 目次 概要 脆弱性チェーン 影響を受けるバージョン 特徴 インストール 使い方 メニューオプション 抽出モード パフォーマンス 法的免責事項 概要...

CVE-2026-74251

Phoca Cart の属性フィルタを介した未認証 SQL インジェクション Phoca Cart ≤ 6.1.6 — 未認証の攻撃者が時間ベースのブラインド注入によりデータベース全体を抽出 概要 Phoca Cart の公開ショップ商品ページにおける a（属性）および s（仕様）GET 配列パラメータは、パラメータ化やエスケープなしで生のまま SQL の WHERE 句に連結されます。未認証の攻撃者はこれらのパラメータを通じて任意の SQL を注入でき、時間ベースのブラインド手法によりデータベース全体の抽出が可能になります。 この脆弱性は...

CVE-2026-100847 AzuraCast before 0.23.8 DQL Injection via sortOrder

AzuraCast before 0.23.8 contains a DQL injection vulnerability in the sortOrder API parameter of AbstractSearchableListAction.php. Attackers can inject arbitrary DQL expressions through the sortOrder parameter to extract sensitive database information including user credentials and station settin...

CVE-2026-89237

The Bluff Post WordPress plugin (versions through 1.1.1 ) is vulnerable to an unauthenticated SQL injection . The root cause is the failure to sanitize and escape parameters—specifically the 'table_name' and 'column_name' parameters—before using them as identifiers in a SQL query. This allows an ...

CVE-2026-62262

The open-source photo gallery application Piwigo is vulnerable to SQL injection in versions 17.0.0beta1 and earlier when the rating feature is enabled. An unauthenticated guest can call pwg.images.filteredSearch.create with a crafted ratings[] value. The root cause is that include/ws_functions/pw...

CVE-2026-62262 Piwigo: Unauthenticated SQL injection in `pwg.images.filteredSearch.create`

Piwigo is a full featured open source photo gallery application for the web. In 17.0.0beta1 and earlier, when rating is enabled, an unauthenticated guest can call pwg.images.filteredSearch.create with a crafted ratings value and then open the returned search URL. include/wsfunctions/pwg.images.ph...

CVE-2026-93899

The Better Messages plugin for WordPress (all versions up to and including 3.0.4 ) is vulnerable to a generic SQL Injection via the 'group_id' Message Meta Parameter. The root cause is insufficient escaping of the user-supplied parameter and a lack of sufficient preparation on the existing SQL qu...

PT-2026-98882

Name of the Vulnerable Software and Affected Versions Piwigo versions 17.0.0beta1 and earlier Description An unauthenticated guest can perform error-based or blind extraction of database information and trigger database-dependent time delays through the public search flow when rating is enabled...

CVE-2026-96600

Isotope eCommerce through 2.9.10 contains a blind SQL injection vulnerability in backend callbacks that interpolate request-controlled identifiers and administrator-supplied values directly into SQL statements. Authenticated Contao backend users with Isotope module permissions can exploit...

CVE-2026-96600 Isotope eCommerce through 2.9.10 SQL Injection via Backend Callbacks

Isotope eCommerce through 2.9.10 contains a blind SQL injection vulnerability in backend callbacks that interpolate request-controlled identifiers and administrator-supplied values directly into SQL statements. Authenticated Contao backend users with Isotope module permissions can exploit...

EUVD-2026-85169

The Rename wp-login.php to anything you want plugin for WordPress is vulnerable to time-based SQL Injection via 'log' Username Parameter in all versions up to, and including, 2.0.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...

CVE-2026-93368

The Rename wp-login.php to anything you want plugin for WordPress is vulnerable to a time-based SQL Injection in all versions up to and including 2.0.1 . The root cause is insufficient escaping and a lack of sufficient preparation on the existing SQL query for the 'log' (Username) parameter. Beca...

CVE-2024-2876

CVE-2024-2876 취약점 설명: WordPress용 Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce 플러그인은 사용자가 제공한 매개변수에 대한 이스케이프 처리 부족과 기존 SQL 쿼리에 대한 충분한 준비preparation 부족으로 인해 5.7.14를 포함한 모든 버전에서 ‘IGESSubscribersQuery’ 클래스의 ‘run’ 함수를 통한 SQL 인젝션에 취약합니다. 이로...

CVE-2026-9855 Custom Field Template <= 2.7.8 - Authenticated (Contributor+) SQL Injection via 'post_ID' Parameter

The Custom Field Template plugin for WordPress is vulnerable to generic SQL Injection via the 'postID' parameter in all versions up to, and including, 2.7.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

CVE-2026-13200: Improper Neutralization of Special Elements used in an SQL Command

The Create plugin for WordPress is vulnerable to generic SQL Injection via the 'order' parameter in all versions up to, and including, 2.5.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

PT-2026-95792

Name of the Vulnerable Software and Affected Versions GoPay for WooCommerce versions prior to 1.0.37 Description An issue exists where authenticated attackers with shop manager-level access or higher can perform a generic SQL Injection. This occurs because the plugin fails to sufficiently escape...

CVE-2026-6295: Improper Neutralization of Special Elements used in an SQL Command

The WP Optimizer plugin for WordPress is vulnerable to SQL Injection via the 's' parameter in all versions up to and including 2.5.0. This is due to an unsafe subquery-detection branch in the Query::parsekeycomparefield method that, when the user-supplied value matches the regex ^\sSELECT\s+, wra...

PT-2026-95775

Name of the Vulnerable Software and Affected Versions Create plugin for WordPress versions prior to 2.5.4 Description An issue exists where authenticated attackers with author-level access or higher can perform a SQL Injection. This occurs because the order by parameter is not sufficiently escape...

CVE-2026-77928 ClipBucket < 5.5.3-#182 Blind SQL Injection via Private Message Deletion Endpoint

ClipBucket v5 before 5.5.3-182 contains a blind SQL injection vulnerability that allows authenticated users to extract arbitrary database contents by submitting the msgid parameter as an array to bypass the cleanrequests sanitization function in ClipBucket.class.php. Attackers can pass unsanitize...