CVE-2026-104694

The Thrive Automator WordPress plugin before 11.2 does not properly sanitize and escape a parameter's array key before using it in a SQL query, allowing authenticated attackers with editor-level access to perform blind SQL injection attacks...

EUVD-2026-111732

The Recipe Card Blocks Lite WordPress plugin before 3.6.4 does not sanitize and cast a block and shortcode attribute before concatenating it into SQL queries, allowing authenticated users with Contributor-level access or above to perform SQL injection attacks...

CVE-2026-115281

The Recipe Card Blocks Lite WordPress plugin versions before 3.6.4 is vulnerable to SQL injection . The root cause is a failure to sanitize and cast a block and shortcode attribute (specifically the 'recipeId' attribute) before it is concatenated into SQL queries. This allows authenticated users ...

CVE-2026-115281 Recipe Card Blocks 3.5.0 - 3.6.3 - Contributor+ SQLi via 'recipeId' Attribute

The Recipe Card Blocks Lite WordPress plugin before 3.6.4 does not sanitize and cast a block and shortcode attribute before concatenating it into SQL queries, allowing authenticated users with Contributor-level access or above to perform SQL injection attacks...

CVE-2026-115224 Smart Popup by Supsystic < 2.0.2 - Admin+ SQLi via Popup Page/Category Binding

The Customer Engagement System WordPress plugin before 2.0.2 does not safely build the SQL statements that store a popup's page and category visibility rules, concatenating request-supplied ID values directly into an INSERT statement with no parameter binding or integer cast, allowing an...

CVE-2026-115224

The Customer Engagement System WordPress plugin (also identified as Smart Popup by Supsystic ) versions prior to 2.0.2 is vulnerable to SQL Injection . The root cause is the improper construction of SQL statements used to store popup page and category visibility rules, where request-supplied ID v...

CVE-2026-115224 Smart Popup by Supsystic < 2.0.2 - Admin+ SQLi via Popup Page/Category Binding

The Customer Engagement System WordPress plugin before 2.0.2 does not safely build the SQL statements that store a popup's page and category visibility rules, concatenating request-supplied ID values directly into an INSERT statement with no parameter binding or integer cast, allowing an...

EUVD-2026-111729

The Customer Engagement System WordPress plugin before 2.0.2 does not safely build the SQL statements that store a popup's page and category visibility rules, concatenating request-supplied ID values directly into an INSERT statement with no parameter binding or integer cast, allowing an...

CVE-2026-111027

The Welcart e-Commerce WordPress plugin versions prior to 2.12.6 is vulnerable to SQL injection . The root cause is the failure to properly sanitize and escape a parameter before its use in a SQL query; specifically, the plugin strips previously applied escaping before execution. This flaw allows...

CVE-2026-111027 Welcart e-Commerce < 2.12.6 - Editor+ SQLi via 'log_id' Parameter

The Welcart e-Commerce WordPress plugin before 2.12.6 does not properly sanitise and escape a parameter before using it in a SQL query, and strips the escaping it had applied before running the query, allowing users with the Editor role or higher to perform SQL injection attacks...

EUVD-2026-111716

The Welcart e-Commerce WordPress plugin before 2.12.6 does not properly sanitise and escape a parameter before using it in a SQL query, and strips the escaping it had applied before running the query, allowing users with the Editor role or higher to perform SQL injection attacks...

EUVD-2026-111700

The Thrive Automator WordPress plugin before 11.2 does not properly sanitize and escape a parameter's array key before using it in a SQL query, allowing authenticated attackers with editor-level access to perform blind SQL injection attacks...

CVE-2026-104694

The Thrive Automator WordPress plugin (versions before 11.2 ) is vulnerable to blind SQL injection . The flaw exists because the plugin fails to properly sanitize and escape a parameter's array key before including it in a SQL query. This vulnerability can be exploited by authenticated attackers ...

CVE-2026-104694 Thrive Automator < 11.2 - Editor+ Blind SQLi via 'additional' Parameter

The Thrive Automator WordPress plugin before 11.2 does not properly sanitize and escape a parameter's array key before using it in a SQL query, allowing authenticated attackers with editor-level access to perform blind SQL injection attacks...

CVE-2026-118378

Tabularis before 0.28.0 contains an SQL injection vulnerability in its SQLite driver that allows MCP clients to execute stacked statements by supplying a crafted tablename to the describetable tool. Attackers, including AI agents steered by untrusted content, can close the quoted PRAGMA argument...

Citrix SD-WAN and NetScaler SD-WAN - SQL Injection

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 contain an SQL injection vulnerability. An unauthenticated attacker can exploit improper validation of input in specific components, which could allow for execution of arbitrary SQL queries against the backend database...

CVE-2026-118378 Tabularis before 0.28.0 SQL Injection via MCP describe_table table_name

Tabularis before 0.28.0 contains an SQL injection vulnerability in its SQLite driver that allows MCP clients to execute stacked statements by supplying a crafted tablename to the describetable tool. Attackers, including AI agents steered by untrusted content, can close the quoted PRAGMA argument...

EUVD-2026-111554

Tabularis before 0.28.0 contains an SQL injection vulnerability in its SQLite driver that allows MCP clients to execute stacked statements by supplying a crafted tablename to the describetable tool. Attackers, including AI agents steered by untrusted content, can close the quoted PRAGMA argument...

CVE-2026-118378

Tabularis before version 0.28.0 is vulnerable to an SQL injection in its SQLite driver . This flaw allows MCP clients to execute stacked statements by providing a crafted table_name to the describe_table tool. Specifically, an attacker can close the quoted PRAGMA argument and append additional co...

CVE-2026-118378 Tabularis before 0.28.0 SQL Injection via MCP describe_table table_name

Tabularis before 0.28.0 contains an SQL injection vulnerability in its SQLite driver that allows MCP clients to execute stacked statements by supplying a crafted tablename to the describetable tool. Attackers, including AI agents steered by untrusted content, can close the quoted PRAGMA argument...