251164 matches found
CVE-2026-59525: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in Participants Database = 2.7.8.3 versions...
CVE-2026-61950: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in TrueBooker = 1.2.3 versions...
CVE-2026-65451: Improper Neutralization of Special Elements used in an SQL Command
Contributor SQL Injection in MapSVG = 8.14.0 versions...
CVE-2026-65450: Improper Neutralization of Special Elements used in an SQL Command
Contributor SQL Injection in MapSVG = 8.14.0 versions...
PT-2026-63937
Name of the Vulnerable Software and Affected Versions Visualizer versions prior to 4.0.7 Description Themeisle Visualizer contains an issue involving improper neutralization of special elements used in an SQL command, which allows for Blind SQL Injection. This occurs specifically through the...
PT-2026-63943
Shop manager SQL Injection in Persian Woocommerce SMS = 7.2.2 versions...
AlmaLinux 10 : mariadb-connector-c (ALSA-2026:43505)
The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:43505 advisory. mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysqlrealescapestring CVE-2026-44172 Tenable has extracted...
PT-2026-63580
The Lumise Product Designer for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'id' and 'table' parameters in the uploaded cart JSON file processed by the checkout AJAX action in versions up to, and including, 2.1.1. This is due to insufficient escaping on the user-suppli...
CVE-2026-65526: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Themeisle Visualizer allows Blind SQL Injection. This issue affects Visualizer: from n/a through 4.0.1...
GHSA-652Q-GVQ3-74QV n8n: Snowflake Node executeQuery Operation Allows SQL Injection via Unparameterized Expression Interpolation
Impact The n8n Snowflake node's Execute Query operation interpolated expression values directly into the SQL string, making queries built with untrusted data susceptible to SQL injection. Exploitation requires that a workflow author has already embedded untrusted expression data directly in a raw...
NPM: n8n: MySQL v1 Node executeQuery Operation Allows SQL Injection via Unparameterized Expression Interpolation
NPM: n8n: MySQL v1 Node executeQuery Operation Allows SQL Injection via Unparameterized Expression Interpolation vulnerability discovered by ? in WordPress Npm n8n versions 1.123.61...
EUVD-2026-42269
n8n: MySQL v1 Node executeQuery Operation Allows SQL Injection via Unparameterized Expression Interpolation...
GHSA-HWMJ-QG4V-CVG9 n8n: MySQL v1 Node executeQuery Operation Allows SQL Injection via Unparameterized Expression Interpolation
Impact The legacy MySQL v1 node's executeQuery operation substitutes evaluated ... expression values directly into the raw SQL string without parameterization. If a workflow uses this operation with expression-sourced values in the query and is connected to an externally-reachable trigger such as...
n8n: MySQL v1 Node executeQuery Operation Allows SQL Injection via Unparameterized Expression Interpolation
Impact The legacy MySQL v1 node's executeQuery operation substitutes evaluated ... expression values directly into the raw SQL string without parameterization. If a workflow uses this operation with expression-sourced values in the query and is connected to an externally-reachable trigger such as...
WordPress Registrations for the Events Calendar – Event Registration Plugin plugin <= 3.2 - Authenticated (Contributor+) SQL Injection vulnerability
Authenticated Contributor+ SQL Injection vulnerability discovered by Wordfence PRISM in WordPress Plugin Registrations for the Events Calendar versions = 3.2...
WordPress Premium Packages – Sell Digital Products Securely plugin <= 7.0.4 - Authenticated (Admin+) SQL Injection vulnerability
Authenticated Admin+ SQL Injection vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin WPDM – Premium Packages versions = 7.0.4...
CVE-2026-2395
Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Xpoda Türkiye Informatics Technology Inc. No Code Platform allows SQL Injection. This issue affects No Code Platform: from 4.1.3 before 4.1.4...
CVE-2026-2395 SQLi in Xpoda Türkiye Informatics Technology's No Code Platform
Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Xpoda Türkiye Informatics Technology Inc. No Code Platform allows SQL Injection. This issue affects No Code Platform: from 4.1.3 before 4.1.4...
CVE-2026-2395
Technical details are not publicly available in the provided documents. No specifics on affected components, versions, or fix are included here. Monitor for updates from the vendor and security advisories.