CVE-2026-61950 WordPress TrueBooker plugin <= 1.2.3 - SQL Injection vulnerability

Unauthenticated SQL Injection in TrueBooker = 1.2.3 versions...

CVE-2026-61950

CVE-2026-61950 : Unauthenticated SQL injection in the WordPress plugin TrueBooker (versions &lt;= 1.2.3). The CVE entry indicates a high-severity, network-exposed vulnerability with low attack complexity and no privileges required. The impact is highlighted as high confidentiality impact and low ...

CVE-2026-61950 WordPress TrueBooker plugin <= 1.2.3 - SQL Injection vulnerability

Unauthenticated SQL Injection in TrueBooker = 1.2.3 versions...

CVE-2026-61949 WordPress Bookly plugin <= 27.7 - SQL Injection vulnerability

Unauthenticated SQL Injection in Bookly = 27.7 versions...

CVE-2026-61949

CVE-2026-61949 describes an unauthenticated SQL injection in the WordPress plugin Bookly (versions

CVE-2026-61948 WordPress WPDM – Premium Packages plugin <= 6.2.0 - SQL Injection vulnerability

Unauthenticated SQL Injection in WPDM – Premium Packages = 6.2.0 versions...

CVE-2026-61948 WordPress WPDM – Premium Packages plugin <= 6.2.0 - SQL Injection vulnerability

Unauthenticated SQL Injection in WPDM – Premium Packages = 6.2.0 versions...

CVE-2026-59525 WordPress Participants Database plugin <= 2.7.8.3 - SQL Injection vulnerability

Unauthenticated SQL Injection in Participants Database = 2.7.8.3 versions...

CVE-2026-59525 WordPress Participants Database plugin <= 2.7.8.3 - SQL Injection vulnerability

Unauthenticated SQL Injection in Participants Database = 2.7.8.3 versions...

CVE-2026-59525

The CVE covers the WordPress plugin Participants Database (affected version:

CVE-2026-59526

CVE-2026-59526 : Unauthenticated SQL injection in WordPress MapSVG plugin ≤ 8.14.0. Reported as a critical vulnerability (CVSS 3.1: 9.3) with network access and no privileges required; confidentiality impact High, availability Low, no integrity impact. The connected documents confirm the issue bu...

CVE-2026-59514

The CVE-2026-59514 entry concerns the WordPress Buddyboss Platform plugin, affected versions

CVE-2026-59514 WordPress Buddyboss Platform plugin <= 3.0.5 - SQL Injection vulnerability

Unauthenticated SQL Injection in Buddyboss Platform = 3.0.5 versions...

CVE-2026-59514 WordPress Buddyboss Platform plugin <= 3.0.5 - SQL Injection vulnerability

Unauthenticated SQL Injection in Buddyboss Platform = 3.0.5 versions...

EUVD-2026-48187

Unauthenticated SQL Injection in Buddyboss Platform = 3.0.5 versions...

CVE-2026-25405 WordPress eRoom plugin <= 1.7.1 - SQL Injection vulnerability

Contributor SQL Injection in eRoom = 1.7.1 versions...

CVE-2026-25405 WordPress eRoom plugin <= 1.7.1 - SQL Injection vulnerability

Contributor SQL Injection in eRoom = 1.7.1 versions...

CVE-2026-25405

CVE-2026-25405 affects the WordPress eRoom plugin (≤ 1.7.1). It is a reported SQL Injection vulnerability. CVSSv3.1: 8.5 (HIGH), NETWORK, LOW privileges, no user interaction, confidentiality impact HIGH, integrity and availability variances (I: NONE, A: LOW), scope changed. Connected documents pr...

CVE-2026-24552 WordPress Create by Mediavine plugin <= 2.5.3 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in John-Michael L'Allier Create mediavine-create allows Blind SQL Injection.This issue affects Create: from n/a through 2.5.3...

CVE-2026-24552 WordPress Create by Mediavine plugin <= 2.5.3 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in John-Michael L'Allier Create mediavine-create allows Blind SQL Injection.This issue affects Create: from n/a through 2.5.3...