162 matches found
CVE-2026-112860
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in xnau webdesign Participants Database participants-database allows Blind SQL Injection.This issue affects Participants Database: from n/a through 2.7.8.5...
CVE-2026-112862
Deserialization of Untrusted Data vulnerability in xnau webdesign Participants Database participants-database allows Object Injection.This issue affects Participants Database: from n/a through 2.7.8.5...
EUVD-2026-108630
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in xnau webdesign Participants Database participants-database allows Blind SQL Injection.This issue affects Participants Database: from n/a through 2.7.8.5...
EUVD-2026-108629
Deserialization of Untrusted Data vulnerability in xnau webdesign Participants Database participants-database allows Object Injection.This issue affects Participants Database: from n/a through 2.7.8.5...
CVE-2026-112860 WordPress Participants Database plugin <= 2.7.8.5 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in xnau webdesign Participants Database participants-database allows Blind SQL Injection.This issue affects Participants Database: from n/a through 2.7.8.5...
CVE-2026-112862 WordPress Participants Database plugin <= 2.7.8.5 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in xnau webdesign Participants Database participants-database allows Object Injection.This issue affects Participants Database: from n/a through 2.7.8.5...
CVE-2026-112860
The Participants Database plugin for WordPress (versions
CVE-2026-112862
The Participants Database WordPress plugin (versions
WordPress Participants Database plugin <= 2.7.8.5 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Tarcísio LuchesiPoystick in WordPress Plugin Participants Database versions = 2.7.8.5...
WordPress Participants Database plugin <= 2.7.8.5 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Tarcísio LuchesiPoystick in WordPress Plugin Participants Database versions = 2.7.8.5...
CVE-2026-112861
Authorization Bypass Through User-Controlled Key vulnerability in xnau webdesign Participants Database participants-database allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Participants Database: from n/a through 2.7.8.5...
CVE-2026-112861 WordPress Participants Database plugin <= 2.7.8.5 - Insecure Direct Object References (IDOR) vulnerability
Authorization Bypass Through User-Controlled Key vulnerability in xnau webdesign Participants Database participants-database allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Participants Database: from n/a through 2.7.8.5...
EUVD-2026-105222
Authorization Bypass Through User-Controlled Key vulnerability in xnau webdesign Participants Database participants-database allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Participants Database: from n/a through 2.7.8.5...
CVE-2026-112861
The Participants Database plugin for WordPress (versions up to 2.7.8.5 ) is vulnerable to an Insecure Direct Object Reference (IDOR) . This vulnerability is caused by an Authorization Bypass Through User-Controlled Key , where incorrectly configured access control security levels allow for unauth...
WordPress Participants Database plugin <= 2.7.8.5 - Insecure Direct Object References (IDOR) vulnerability
Insecure Direct Object References IDOR vulnerability discovered by Tarcísio LuchesiPoystick in WordPress Plugin Participants Database versions = 2.7.8.5...
PT-2026-118579
Name of the Vulnerable Software and Affected Versions Participants Database versions prior to 2.7.8.5 Description An authorization bypass exists due to a user-controlled key, which allows the exploitation of incorrectly configured access control security levels. Recommendations Update to version...
CVE-2026-28189
Unauthenticated Arbitrary File Deletion in Participants Database = 2.7.8.4 versions...
CVE-2026-28189
The CVE-2026-28189 entry concerns the WordPress Participants Database plugin version <= 2.7.8.4, which is affected by an unauthenticated Arbitrary File Deletion vulnerability. The available records indicate the issue arises in this plugin series and can be triggered without authentication, wit...
