PT-2026-113974

DataEase is an open source data visualization and analysis tool. Authenticated users with datasource access can supply crafted schema names, connection usernames, table names, or database names to datasource metadata operations, including getSchema, validate, save, and update flows. CalciteProvid...

PT-2026-113618

The JTL-Connector for WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via 'product.push' Identity Endpoint in all versions up to, and including, 2.4.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL quer...

PT-2026-114223

WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the unauthenticated web/html/socio/sistema/cadastro cobrancas geracao.php endpoint accepts form-encoded POST data through extract$ REQUEST and interpolates codigo, descricao, data emissao, data vencimento, data pagamento, valor,...

PT-2026-113961

Name of the Vulnerable Software and Affected Versions Nessus affected versions not specified Description An SQL injection allows an authenticated user to read or modify data stored by the system. SQL injection is a technique where malicious SQL statements are inserted into entry fields for...

PT-2026-113689

Name of the Vulnerable Software and Affected Versions WMS MobileServer affected versions not specified Description The authorization middleware fails to enforce authentication in two scenarios. First, authentication is only required for GET and HEAD requests, meaning other HTTP methods are...

CVE-2026-96661: Improper Neutralization of Special Elements used in an SQL Command

The Gmedia Photo Gallery plugin for WordPress is vulnerable to time-based SQL Injection via the 'gmediain' parameter in all versions up to, and including, 1.25.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

PT-2026-114216

Name of the Vulnerable Software and Affected Versions e107 versions prior to 2.3.7 Description The bundled alt auth plugin in this content management system CMS contains a flaw in the otherdb and e107db authentication backends. The login methods in e107 plugins/alt auth/otherdb auth.php and e107...

PT-2026-114200

Redash is a package for data visualization and sharing. From versions after 8.0.0 until 26.9.0, the Query Results query runner in redash/query runner/query results.py accepts param query N key=value parameters and passed attacker-controlled values to replace query parameters for raw substitution...

PT-2026-113626

Name of the Vulnerable Software and Affected Versions Gmedia Photo Gallery versions prior to 1.25.2 Description The plugin is subject to time-based SQL Injection, a technique where an attacker sends a query that forces the database to wait a specific amount of time before responding, allowing the...

PT-2026-113602

The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'validate' parameter in all versions up to, and including, 10.8.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. Th...

CVE-2026-55386: Improper Neutralization of Special Elements used in an SQL Command

InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.4.0, InvoiceShelf passes the authenticated user's orderByField query parameter into Laravel orderBy calls in Invoice::scopeApplyFilters without...

CVE-2026-55572: Improper Neutralization of Special Elements used in an SQL Command

e107 is a content management system CMS. Prior to 2.3.7, the bundled altauth plugin's otherdb and e107db authentication backends interpolate the submitted login username directly into SQL in e107plugins/altauth/otherdbauth.php and e107plugins/altauth/e107dbauth.php. The login methods execute thos...

CVE-2026-104141: Improper Neutralization of Special Elements used in an SQL Command

DataEase is an open source data visualization and analysis tool. Authenticated users with datasource access can supply crafted schema names, connection usernames, table names, or database names to datasource metadata operations, including getSchema, validate, save, and update flows. CalciteProvid...

CVE-2026-110614: Improper Neutralization of Special Elements used in an SQL Command

Yiuman citrus through 0.15.0 contains an ORDER BY sql injection vulnerability in the citrus-support generic query framework that allows users to inject SQL via the sortBy request parameter. Attackers can reach any generic list route of controllers extending BaseQueryController or BaseQueryRestful...

CVE-2026-97668: Improper Neutralization of Special Elements used in an SQL Command

The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the guest cart persistent metavalue in all versions up to, and including, 10.8.0 due to insufficient escaping on user supplied data and lack of sufficient preparation on the existing SQL query in the...

Debian dsa-6561 : sogo - security update

The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6561 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6561-1 [email protected] https://www.debian.org/security/ Moritz...

PT-2026-114056

Yiuman citrus through 0.15.0 contains an ORDER BY sql injection vulnerability in the citrus-support generic query framework that allows users to inject SQL via the sortBy request parameter. Attackers can reach any generic list route of controllers extending BaseQueryController or BaseQueryRestful...

CVE-2026-104143: Authentication Bypass by Alternate Name

DataEase is an open source data visualization and analysis tool. Prior to 2.10.26, authenticated users can store a crafted custom dateFormat for a dataset field. DatasetTableFieldDTO.dateFormat is inserted without validation into date conversion templates used by Dimension2SQLObj, CustomWhere2Str...

PT-2026-113624

The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to blind SQL Injection via the 'inputs' parameter in all versions up to, and including, 1.15.48 due to insufficient escaping on the user supplied parameter and lack of sufficient...

PT-2026-114222

WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the unauthenticated web/html/socio/sistema/cadastro cobranca.php endpoint accepts POST input through extract$ REQUEST and directly incorporates valor, valor pago, id pessoa, id socio, and id sociotipo into UPDATE, INSERT, and...