EUVD-2026-89957

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPTasty Business Directory business-directory-plugin allows Blind SQL Injection.This issue affects Business Directory: from n/a through 6.4.27...

EUVD-2026-89963

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Trex Digital Smart Manufacturing Systems Inc. Trex MES allows Command Line Execution through SQL Injection. This issue affects Trex MES: through 2026-09-29...

EUVD-2026-89953

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Dolusoft Software Technologies SOPLOG allows SQL Injection. This issue affects SOPLOG: before Soplog 2026.9.4.1...

EUVD-2026-89932

Contributor SQL Injection in Media LIbrary Assistant = 3.41 versions...

EUVD-2026-89928

Contributor SQL Injection in Event Tickets = 5.29.5 versions...

EUVD-2026-89875

Unauthenticated SQL Injection in Books Gallery = 4.8.3 versions...

EUVD-2026-89879

Administrator SQL Injection in Admin Notices Manager = 1.6.0 versions...

EUVD-2026-89880

Administrator SQL Injection in Category Discount Woocommerce = 5.18 versions...

EUVD-2026-89858

Administrator SQL Injection in Estatik = 4.3.5 versions...

EUVD-2026-89859

Author SQL Injection in WP ERP = 1.17.9 versions...

EUVD-2026-89836

Contributor SQL Injection in Easy Pricing Tables = 4.1.2 versions...

EUVD-2026-89842

Unauthenticated SQL Injection in GamiPress = 8.0.2 versions...

EUVD-2026-89835

Author SQL Injection in Quiz Cat = 3.1.1 versions...

EUVD-2026-89825

Unauthenticated SQL Injection in WP Data Access = 5.5.84 versions...

EUVD-2026-89822

Administrator SQL Injection in WP Activity Log = 5.6.6 versions...

EUVD-2026-89949

A security vulnerability has been detected in OS4ED openSIS-Classic up to 9.3. Affected is the function dbproperties of the file functions/DatabaseInc.php of the component Save Data Handler. Such manipulation of the argument values leads to sql injection. The attack can be launched remotely. The...

EUVD-2026-89947

A weakness has been identified in OS4ED openSIS-Classic up to 9.3. This impacts the function DBQuery of the file functions/GetStuListFnc.php of the component Student List Search Endpoint. This manipulation of the argument LOsort causes sql injection. The attack can be initiated remotely. The...

EUVD-2026-89799

A security flaw has been discovered in OS4ED openSIS-Classic up to 9.3. This affects an unknown function of the file functions/CustomFieldsFnc.php of the component Student Search. The manipulation of the argument cust results in sql injection. It is possible to launch the attack remotely. The...

CVE-2026-103230

The AdithyaYelloju Restaurant-Management-System is vulnerable to a remote SQL injection in the Order Placement component. The flaw resides in the mysqli_query function within the User/ord.php file. An attacker can exploit this by manipulating the id/name arguments to execute unauthorized queries....

CVE-2026-76570

Joomla Extension - joomcode.com - Unauthenticated SQL injection in read and write queries in JCTables 1.21.1 - The front-end CRUD API controller performs no Joomla token validation and no authentication check on any task. Table names, column names, and values are taken directly from request...