242827 matches found
WordPress AWP Classifieds plugin <= 4.4.7 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Thaer Assfour in WordPress Plugin AWP Classifieds versions = 4.4.7...
CVE-2026-65532
Shop manager SQL Injection in Persian Woocommerce SMS = 7.2.2 versions...
CVE-2026-65526
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Themeisle Visualizer allows Blind SQL Injection. This issue affects Visualizer: from n/a through 4.0.1...
CVE-2026-65454
Contributor SQL Injection in Quiz And Survey Master = 11.2.0 versions...
CVE-2026-61949
Unauthenticated SQL Injection in Bookly = 27.7 versions...
CVE-2026-59514
Unauthenticated SQL Injection in Buddyboss Platform = 3.0.5 versions...
CVE-2026-59525
Unauthenticated SQL Injection in Participants Database = 2.7.8.3 versions...
CVE-2026-25405
Contributor SQL Injection in eRoom = 1.7.1 versions...
CVE-2026-24552
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in John-Michael L'Allier Create mediavine-create allows Blind SQL Injection.This issue affects Create: from n/a through 2.5.3...
WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.10 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Zainul Anwar Adi Putra in WordPress Plugin rtMedia for WordPress, BuddyPress and bbPress versions = 4.7.10...
PYSEC-2026-3463 DIRAC is vulnerable to RCE in FileCatalog DatasetManager via SQL injection + eval
Summary The FileCatalog DatasetManager runs a query on the database and passes the result to eval. The SQL query contains an injection vulnerability which allows an authenticated user to control the parameter returned to the eval resulting in remote code execution. Details The FileCatalog...
WordPress GamiPress plugin <= 7.9.7 - SQL Injection vulnerability
SQL Injection vulnerability discovered by qdtad in WordPress Plugin GamiPress versions = 7.9.7...
CVE-2026-65532 WordPress Persian Woocommerce SMS plugin <= 7.2.2 - SQL Injection vulnerability
Shop manager SQL Injection in Persian Woocommerce SMS = 7.2.2 versions...
CVE-2026-65532 WordPress Persian Woocommerce SMS plugin <= 7.2.2 - SQL Injection vulnerability
Shop manager SQL Injection in Persian Woocommerce SMS = 7.2.2 versions...
CVE-2026-65532
Shop manager SQL Injection in Persian Woocommerce SMS = 7.2.2 versions...
CVE-2026-65532
CVE-2026-65532 concerns the WordPress Persian Woocommerce SMS plugin, affected
CVE-2026-65526
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Themeisle Visualizer allows Blind SQL Injection. This issue affects Visualizer: from n/a through 4.0.1...
CVE-2026-65526 WordPress Visualizer plugin <= 4.0.1 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Themeisle Visualizer allows Blind SQL Injection. This issue affects Visualizer: from n/a through 4.0.1...
