227536 matches found
CVE-2026-16532
The Link Library WordPress plugin before 7.9.3 does not properly sanitise and escape a user-supplied value before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks...
CVE-2026-12965
The Super Store Finder WordPress plugin before 7.11 does not sanitize a parameter of an unauthenticated AJAX action before using it in a SQL query, allowing unauthenticated attackers to perform SQL injection and extract data from the database...
WordPress Membership by Supsystic plugin <= 1.4.7 - Unauthenticated SQL Injection vulnerability
Unauthenticated SQL Injection vulnerability discovered by Erik David Martin in WordPress Plugin Membership by Supsystic versions = 1.4.7...
WordPress product-catalog-8 plugin <= 1.2.0 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Lenon Leite in WordPress Plugin Product Catalog 8 versions = 1.2.0...
WordPress WP Google Review Slider plugin <= 6.1 - Unauthenticated SQL Injection vulnerability
Unauthenticated SQL Injection vulnerability discovered by Princy Edward in WordPress Plugin WP Google Review Slider versions = 6.1...
WordPress BBS e-Franchise plugin < 1.1.4 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Lenon Leite in WordPress Plugin BBS e-Franchise versions 1.1.4...
WordPress mwp-viral-signup plugin <= 2.1 - Unauthenticated SQL Injection vulnerability
Unauthenticated SQL Injection vulnerability discovered by TAD Group in WordPress Plugin Wow Viral Signups versions = 2.1...
WordPress PICA Photo Gallery plugin <= 1.0 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Ihsan Sencan in WordPress Plugin PICA Photo Gallery versions = 1.0...
CVE-2026-16539 SM Page Duplicator <= 1.0.0 - Editor+ SQL Injection via Page Duplication
The sm page duplicator WordPress plugin through 1.0.0 does not sanitise and escape a stored value before using it in a SQL statement when duplicating a page, allowing users with the Editor role and above to perform SQL Injection attacks...
EUVD-2026-52182
The sm page duplicator WordPress plugin through 1.0.0 does not sanitise and escape a stored value before using it in a SQL statement when duplicating a page, allowing users with the Editor role and above to perform SQL Injection attacks...
CVE-2026-16539 SM Page Duplicator <= 1.0.0 - Editor+ SQL Injection via Page Duplication
The sm page duplicator WordPress plugin through 1.0.0 does not sanitise and escape a stored value before using it in a SQL statement when duplicating a page, allowing users with the Editor role and above to perform SQL Injection attacks...
CVE-2026-16572 LogMyTrip <= 1.9 - Unauthenticated SQL Injection via 'tid' Cookie
The LogMyTrip WordPress plugin through 1.9 does not sanitize and escape a value taken from a cookie before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks on any page that renders one of the LogMyTrip WordPress plugin through 1.9's shortcodes...
CVE-2026-16572 LogMyTrip <= 1.9 - Unauthenticated SQL Injection via 'tid' Cookie
The LogMyTrip WordPress plugin through 1.9 does not sanitize and escape a value taken from a cookie before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks on any page that renders one of the LogMyTrip WordPress plugin through 1.9's shortcodes...
EUVD-2026-52169
The Super Store Finder WordPress plugin through 7.8 does not sanitize a parameter of an unauthenticated AJAX action before using it in a SQL query, allowing unauthenticated attackers to perform SQL injection and extract data from the database...
CVE-2026-12965 Super Store Finder < 7.11 - Unauthenticated SQL Injection via ssf_tracking
The Super Store Finder WordPress plugin before 7.11 does not sanitize a parameter of an unauthenticated AJAX action before using it in a SQL query, allowing unauthenticated attackers to perform SQL injection and extract data from the database...
CVE-2026-16532 Link Library < 7.9.3 - Unauthenticated SQL Injection via the Front-End Link Submission Form
The Link Library WordPress plugin before 7.9.3 does not properly sanitise and escape a user-supplied value before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks...
CVE-2026-16532 Link Library < 7.9.3 - Unauthenticated SQL Injection via the Front-End Link Submission Form
The Link Library WordPress plugin before 7.9.3 does not properly sanitise and escape a user-supplied value before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks...
CVE-2026-16532
The Link Library WordPress plugin (versions prior to 7.9.3 ) is vulnerable to unauthenticated SQL injection . The root cause is the failure to properly sanitise and escape user-supplied values before utilizing them in a SQL query . Specifically, the vulnerability is accessible via the Front-End L...
