518 matches found
PT-2026-95943
Name of the Vulnerable Software and Affected Versions SourceCodester Online Reviewer Management System version 1.0 Description A flaw allows remote attackers to perform SQL injection, a technique used to interfere with the queries that an application makes to its database. This issue occurs in th...
PT-2026-95941
Name of the Vulnerable Software and Affected Versions SourceCodester Online Reviewer Management System version 1.0 Description A remote SQL injection is possible due to improper handling of the ID variable within the /reviewer 0/admins/assessments/subject/btn functions.php?action=remove endpoint...
PT-2026-95939
Name of the Vulnerable Software and Affected Versions SourceCodester Online Reviewer Management System version 1.0 Description An issue exists in the file /reviewer 0/admins/assessments/course/btn functions.php where an unknown function fails to properly sanitize the courseID argument. This allow...
CVE-2026-93974: Improper Neutralization of Special Elements used in an SQL Command
A flaw has been found in SourceCodester Online Reviewer Management System 1.0. This affects an unknown function of the file /reviewer0/admins/assessments/databank/btnfunctions.php?action=remove. Executing a manipulation of the argument ID can lead to sql injection. The attack can be launched...
CVE-2026-93973: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0. The impacted element is an unknown function of the file /reviewer0/admins/assessments/subject/btnfunctions.php?action=remove. Performing a manipulation of the argument ID results in sql injection. The attack can...
MAL-2026-14434 Malicious code in openai-pr-reviewer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3553acd3c5abc3f71b55740c4b06b2eb278f81bb678c55211f2287a498b60b61 The package's preinstall hook runs index.js, which collects the installer's hostname, username, home directory, DNS servers, current working director...
Malicious code in openai-pr-reviewer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3553acd3c5abc3f71b55740c4b06b2eb278f81bb678c55211f2287a498b60b61 The package's preinstall hook runs index.js, which collects the installer's hostname, username, home directory, DNS servers, current working director...
Malicious Package
Overview openai-pr-reviewer is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
CVE-2026-66658
Subscriber SQL Injection in Reviewer = 3.14.2 versions...
CVE-2026-66658 WordPress Reviewer plugin <= 3.14.2 - SQL Injection vulnerability
Subscriber SQL Injection in Reviewer = 3.14.2 versions...
EUVD-2026-57897
Subscriber SQL Injection in Reviewer = 3.14.2 versions...
CVE-2026-66658
Subscriber SQL Injection in Reviewer = 3.14.2 versions...
CVE-2026-66658
CVE-2026-66658 affects WordPress Reviewer plugin versions ≤ 3.14.2. The issue is described as a SQL Injection vulnerability (Subscriber SQL Injection) with CVSS 3.1, base score 8.5 (HIGH), vector: NETWORK/attackVector N, AC:L, PR:L, UI:N, S:C, C:H, I:N, A:L. Connected sources include CVE records ...
CVE-2026-66658 WordPress Reviewer plugin <= 3.14.2 - SQL Injection vulnerability
Subscriber SQL Injection in Reviewer = 3.14.2 versions...
CVE-2026-66658: Improper Neutralization of Special Elements used in an SQL Command
Subscriber SQL Injection in Reviewer = 3.14.2 versions...
PT-2026-71584
Subscriber SQL Injection in Reviewer = 3.14.2 versions...
WordPress Reviewer plugin <= 3.14.2 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Phat RiO in WordPress Plugin Reviewer versions = 3.14.2...
EUVD-2026-54388
The MStore API WordPress plugin before 4.21.0 does not perform authorization or purchase-ownership checks on its REST product-review creation route, allowing an unauthenticated attacker to create WooCommerce product reviews with an attacker-chosen reviewer name, email and star rating on stores...