94234 matches found
PT-2026-95291
Name of the Vulnerable Software and Affected Versions WCFM Marketplace versions prior to 3.8.2 Description The WCFM Marketplace plugin for WordPress is subject to SQL Injection, a technique where malicious SQL statements are inserted into entry fields for execution. This occurs because the...
PT-2026-95646
Name of the Vulnerable Software and Affected Versions pg partman versions prior to 5.5.0 Description The extension manages partitioned tables by time or ID. The functions run maintenance, show partitions, show partition info, undo partition, and partition data time interpolate the writable part...
PT-2026-95718
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The application uses a calculator-style vault passcode to protect access, but the stored data is not bound to this authentication boundary. A local actor with...
CVE-2026-87770: Improper Neutralization of Special Elements used in an SQL Command
The Price Drop Alert for Woo Commerce WordPress plugin through 1.1 does not sanitize and escape parameters before using them in a SQL query on an AJAX action available to unauthenticated users, allowing unauthenticated attackers to perform SQL injection attacks and extract sensitive data from the...
PT-2026-102167
Security vulnerability affects the litellm-database package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95599
Hongjing e-HR before 8.2 contains a SQL injection vulnerability in the /servlet/codesettree endpoint where the categories query parameter is passed to a database query without sanitization after HRMS-encoding is stripped. An unauthenticated remote attacker can supply a crafted UNION SELECT payloa...
PT-2026-95494
Name of the Vulnerable Software and Affected Versions WACRM versions prior to 0.7.1 Description Account viewers can perform unauthorized actions because flow and automation write routes fail to enforce the agent role before utilizing a service-role database client that bypasses row-level security...
PT-2026-95649
Name of the Vulnerable Software and Affected Versions pg partman versions prior to 5.5.0 Description The inherit template properties function manually surrounds primary-key column names from pg attribute.attname with double quotes without escaping embedded double-quote characters. A user with...
PT-2026-95290
Name of the Vulnerable Software and Affected Versions WP Inventory Manager versions prior to 2.5.2 Description Authenticated attackers with Contributor-level access and above can perform SQL Injection through the where shortcode attribute of the wpinventory shortcode. The issue occurs in the...
PT-2026-100911
Security vulnerability affects the litellm-database package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101687
Security vulnerability affects the litellm-database package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101564
Security vulnerability affects the litellm-database package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101413
Security vulnerability affects the litellm-database package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101402
Security vulnerability affects the litellm-database package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-102175
Security vulnerability affects the litellm-database package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100401
Security vulnerability affects the litellm-database package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95648
Name of the Vulnerable Software and Affected Versions pg partman versions prior to 5.5.0 Description When pg jobmon is installed and part config.jobmon is set to true, exception handlers in several functions place the p parent table variable verbatim into a SQL string literal used to call the pg...
PT-2026-100295
Security vulnerability affects the litellm-database package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95376
Name of the Vulnerable Software and Affected Versions ArcadeDB versions prior to 26.9.1 Description Authenticated attackers can bypass the SSRF guard used by the IMPORT DATABASE and server commands. The system fails to validate IPv6 transition addresses, allowing the use of NAT64, 6to4, or Teredo...