260438 matches found
PT-2026-104615
Name of the Vulnerable Software and Affected Versions Unlimited Elements For Elementor versions prior to 2.0.21 Description Unlimited Elements for Elementor contains a blind SQL injection flaw. This issue allows unauthenticated remote attackers to extract arbitrary database records by failing to...
PT-2026-104658
A security flaw has been discovered in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This impacts an unknown function of the file delivery/delivery.php of the component Take Order Handler. The manipulation of the argument...
CVE-2026-105166: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The affected element is the function insert of the file fooddonateform.php of the component Food Donation Form. Performing a manipulation of the...
PT-2026-104628
A vulnerability was detected in RainyGao DocSys up to 2.02.85. The impacted element is the function BaseController.createDBForMysql of the file BaseController.java of the component Database Management. The manipulation of the argument url results in sql injection. The attack can be executed...
CVE-2026-105149: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in mooSocial up to 3.2.4. This issue affects some unknown processing of the file /stores/all-products. Performing a manipulation of the argument rating results in sql injection. The attack may be initiated remotely. The exploit has been released to the public a...
CVE-2026-105158: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was detected in RainyGao DocSys up to 2.02.85. The impacted element is the function BaseController.createDBForMysql of the file BaseController.java of the component Database Management. The manipulation of the argument url results in sql injection. The attack can be executed...
CVE-2026-103355: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates unlimited-elements-for-elementor allows Blind SQL Injection.This issue affects Unlimited Elements For Elementor...
CVE-2026-105146: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Comsenz Discuz! X5.0-20260801/X5.0-20260820/X5.0-20260910. Affected by this issue is the function modmedalsubmit of the file upload/source/app/admin/child/medals/mod.php of the component Admin Medal Moderation. The manipulation of the argument delete results in sql...
PT-2026-104652
A vulnerability was found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The affected element is the function insert of the file fooddonateform.php of the component Food Donation Form. Performing a manipulation of the...
Exploit for Interpretation Conflict in Wordpress
wp2shell-PoC ⚠ This tool is created solely for education...
WordPress WP BASE Booking plugin <= 6.4.0 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Khanh Nguyen in WordPress Plugin WP BASE Booking versions = 6.4.0...
WordPress EduAdmin Booking plugin < 6.0.0 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Seongwon LEE in WordPress Plugin EduAdmin Booking versions 6.0.0...
WordPress Ajax Search Pro plugin <= 4.29.1 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Rafie Muhammad in WordPress Plugin Ajax Search Pro versions = 4.29.1...
WordPress tagDiv Opt-In Builder plugin <= 1.7.6 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Rafie Muhammad in WordPress Plugin tagDiv Opt-In Builder versions = 1.7.6...
WordPress tagDiv Opt-In Builder plugin <= 1.7.6 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Rafie Muhammad in WordPress Plugin tagDiv Opt-In Builder versions = 1.7.6...
WordPress JNews - Pay Writer plugin <= 12.0.1 - SQL Injection vulnerability
WordPress JNews - Pay Writer plugin = 12.0.1 - SQL Injection vulnerability discovered by Rafie Muhammad in WordPress Plugin JNews - Pay Writer versions = 12.0.1...
WordPress Taskbuilder plugin <= 6.0.5 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Heinrihs Skrodelis in WordPress Plugin Taskbuilder versions = 6.0.5...
WordPress WP BASE Booking plugin <= 6.4.0 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Khanh Nguyen in WordPress Plugin WP BASE Booking versions = 6.4.0...
CVE-2023-32590
CVE-2023-32590 Subscribe to Category = 2.7.4 - حقن SQL غير مصادق الوصف إضافة Subscribe to Category لووردبريس معرضة لحقن SQL في الإصدارات حتى 2.7.4 شاملة، وذلك بسبب عدم كفاية الهروب من المعامل المقدم من المستخدم ونقص التحضير الكافي لاستعلام SQL الموجود. وهذا يجعل من الممكن للمهاجمين غير المصادقين...