242904 matches found
NPM: n8n: MySQL v1 Node executeQuery Operation Allows SQL Injection via Unparameterized Expression Interpolation
NPM: n8n: MySQL v1 Node executeQuery Operation Allows SQL Injection via Unparameterized Expression Interpolation vulnerability discovered by ? in WordPress Npm n8n versions 1.123.61...
EUVD-2026-42269
n8n: MySQL v1 Node executeQuery Operation Allows SQL Injection via Unparameterized Expression Interpolation...
GHSA-HWMJ-QG4V-CVG9 n8n: MySQL v1 Node executeQuery Operation Allows SQL Injection via Unparameterized Expression Interpolation
Impact The legacy MySQL v1 node's executeQuery operation substitutes evaluated ... expression values directly into the raw SQL string without parameterization. If a workflow uses this operation with expression-sourced values in the query and is connected to an externally-reachable trigger such as...
n8n: MySQL v1 Node executeQuery Operation Allows SQL Injection via Unparameterized Expression Interpolation
Impact The legacy MySQL v1 node's executeQuery operation substitutes evaluated ... expression values directly into the raw SQL string without parameterization. If a workflow uses this operation with expression-sourced values in the query and is connected to an externally-reachable trigger such as...
WordPress Registrations for the Events Calendar – Event Registration Plugin plugin <= 3.2 - Authenticated (Contributor+) SQL Injection vulnerability
Authenticated Contributor+ SQL Injection vulnerability discovered by Wordfence PRISM in WordPress Plugin Registrations for the Events Calendar versions = 3.2...
WordPress Premium Packages – Sell Digital Products Securely plugin <= 7.0.4 - Authenticated (Admin+) SQL Injection vulnerability
Authenticated Admin+ SQL Injection vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin WPDM – Premium Packages versions = 7.0.4...
CVE-2026-2395
Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Xpoda Türkiye Informatics Technology Inc. No Code Platform allows SQL Injection. This issue affects No Code Platform: from 4.1.3 before 4.1.4...
CVE-2026-2395 SQLi in Xpoda Türkiye Informatics Technology's No Code Platform
Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Xpoda Türkiye Informatics Technology Inc. No Code Platform allows SQL Injection. This issue affects No Code Platform: from 4.1.3 before 4.1.4...
CVE-2026-2395
Technical details are not publicly available in the provided documents. No specifics on affected components, versions, or fix are included here. Monitor for updates from the vendor and security advisories.
WordPress eRoom plugin <= 1.7.1 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin eRoom versions = 1.7.1...
WordPress Create by Mediavine plugin <= 2.5.3 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Nabil Irawan in WordPress Plugin Create by Mediavine versions = 2.5.3...
Exploit for SQL Injection in Wordpress
WP2Shell Scanner A read-only, non-destructive security audit...
WordPress Image&Video FullScreen Background plugin <= 1.6.8 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Plugin Image&Video FullScreen Background versions = 1.6.8...
WordPress Logos Showcase plugin <= 2.5 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Plugin Logos Showcase versions = 2.5...
WordPress Participants Database plugin <= 2.7.8.3 - SQL Injection vulnerability
SQL Injection vulnerability discovered by L4m in WordPress Plugin Participants Database versions = 2.7.8.3...
wp2shell
wp2shell — Pre-Auth RCE in WordPress core Unauthenticated W...
WordPress Uncanny Automator plugin <= 7.3.2 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Uncanny Automator versions = 7.3.2...
WordPress Quiz And Survey Master plugin <= 11.2.0 - SQL Injection vulnerability
SQL Injection vulnerability discovered by anhcd05 in WordPress Plugin Quiz And Survey Master versions = 11.2.0...