18 matches found
WordPress Dinatur plugin <= 1.18 - Unauthenticated SQL Injection via Column Name Injection vulnerability
Unauthenticated SQL Injection via Column Name Injection vulnerability discovered by João Ramos Maciel and Theo Antonio da Fonseca in WordPress Plugin Dinatur versions = 1.18...
CVE-2026-12983
The Dinatur WordPress plugin through 1.18 does not sanitize and escape user input before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks. The same handler also performs a database table truncation without any authorization check, allowing any unauthenticat...
CVE-2026-12983 Dinatur <= 1.18 - Unauthenticated SQL Injection via Column Name Injection
The Dinatur WordPress plugin through 1.18 does not sanitize and escape user input before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks. The same handler also performs a database table truncation without any authorization check, allowing any unauthenticat...
CVE-2026-12983 Dinatur <= 1.18 - Unauthenticated SQL Injection via Column Name Injection
The Dinatur WordPress plugin through 1.18 does not sanitize and escape user input before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks. The same handler also performs a database table truncation without any authorization check, allowing any unauthenticat...
CVE-2026-12983
The Dinatur WordPress plugin versions prior to 1.19 (through 1.18) is vulnerable to an unauthenticated SQL injection via column name injection. The root cause is the failure to sanitize or escape user input before utilizing it in a SQL query. Furthermore, a specific handler lacks authorization ch...
EUVD-2026-62257
The Dinatur WordPress plugin through 1.18 does not sanitize and escape user input before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks. The same handler also performs a database table truncation without any authorization check, allowing any unauthenticat...
CVE-2026-12983: Improper Neutralization of Special Elements used in an SQL Command
The Dinatur WordPress plugin through 1.18 does not sanitize and escape user input before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks. The same handler also performs a database table truncation without any authorization check, allowing any unauthenticat...
PT-2026-78271
Name of the Vulnerable Software and Affected Versions Dinatur WordPress plugin versions prior to 1.19 Description Unauthenticated users can perform SQL injection attacks because user input is not sanitized or escaped before being used in a SQL query. Additionally, a handler allows unauthenticated...
CVE-2025-68866
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in woofer696 Dinatur dinatur allows Stored XSS.This issue affects Dinatur: from n/a through = 1.18...
CVE-2025-68866
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in woofer696 Dinatur dinatur allows Stored XSS.This issue affects Dinatur: from n/a through = 1.18...
CVE-2025-68866
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in woofer696 Dinatur dinatur allows Stored XSS.This issue affects Dinatur: from n/a through = 1.18...
CVE-2025-68866
CVE-2025-68866 affects the WordPress plugin Dinatur (versions up to and including 1.18). The issue is an Stored XSS caused by improper neutralization of input during web page generation, exposing site visitors to injected scripts. The vulnerability is rated with a CVSSv3.1 base score of 7.1 (High...
CVE-2025-68866 WordPress Dinatur plugin <= 1.18 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in woofer696 Dinatur dinatur allows Stored XSS.This issue affects Dinatur: from n/a through = 1.18...
CVE-2025-68866 WordPress Dinatur plugin <= 1.18 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in woofer696 Dinatur dinatur allows Stored XSS.This issue affects Dinatur: from n/a through = 1.18...
CVE-2025-68866: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in woofer696 Dinatur dinatur allows Stored XSS.This issue affects Dinatur: from n/a through = 1.18...
WordPress plugin Dinatur has a cross-site scripting vulnerability
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. Versions...
PT-2026-4091
Name of the Vulnerable Software and Affected Versions woofer696 Dinatur versions through 1.18 Description The software contains a flaw related to improper input handling during web page generation, specifically a Stored Cross-site Scripting XSS issue. This allows for the injection of malicious...