261441 matches found
CVE-2026-96602 Abdurrab5 online-makeup-store Customer Login customerSignin.php sql injection
A flaw has been found in Abdurrab5 online-makeup-store. This impacts an unknown function of the file customerSignin.php of the component Customer Login Handler. This manipulation of the argument username/password causes sql injection. The attack is possible to be carried out remotely. The exploit...
CVE-2026-96602
A SQL injection vulnerability exists in the Abdurrab5 online-makeup-store within the Customer Login Handler component, specifically affecting an unknown function in the customerSignin.php file. The flaw is triggered by the manipulation of the username/password arguments and can be exploited remot...
postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse
A SQL injection flaw in PostgreSQL's EXTRACT expression deparser allows an authenticated object owner to execute arbitrary SQL commands with superuser privileges. By defining a hostile database object, an attacker can achieve privilege escalation when deparsing tools like pgdump or psql inspect o...
CVE-2026-96601 Abdurrab5 online-makeup-store Admin Login index.php sql injection
A vulnerability was detected in Abdurrab5 online-makeup-store. This affects an unknown function of the file index.php of the component Admin Login Handler. The manipulation of the argument id/password results in sql injection. The attack can be executed remotely. The exploit is now public and may...
CVE-2026-96601 Abdurrab5 online-makeup-store Admin Login index.php sql injection
A vulnerability was detected in Abdurrab5 online-makeup-store. This affects an unknown function of the file index.php of the component Admin Login Handler. The manipulation of the argument id/password results in sql injection. The attack can be executed remotely. The exploit is now public and may...
CVE-2026-96601
A SQL injection vulnerability exists in the Admin Login Handler component of Abdurrab5 online-makeup-store . The flaw is located within an unknown function of the index.php file and is triggered by manipulating the id/password arguments. This vulnerability can be exploited remotely , and the expl...
CVE-2026-96826
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Shazzad Hossain Khan W4 Post List allows Blind SQL Injection. This issue affects W4 Post List: from n/a through 3.0.6...
WordPress Category Discount Woocommerce plugin <= 5.18 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Category Discount Woocommerce versions = 5.18...
WordPress Admin Notices Manager plugin <= 1.6.0 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Admin Notices Manager versions = 1.6.0...
CVE-2026-96826
The W4 Post List WordPress plugin, developed by Shazzad Hossain Khan, is vulnerable to Blind SQL Injection in versions up to and including 3.0.6 . The root cause is the improper neutralization of special elements used in an SQL command. This vulnerability allows an attacker to executeblind SQL qu...
EUVD-2026-85649
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Shazzad Hossain Khan W4 Post List allows Blind SQL Injection. This issue affects W4 Post List: from n/a through 3.0.6...
CVE-2026-96826 WordPress W4 Post List plugin <= 3.0.6 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Shazzad Hossain Khan W4 Post List allows Blind SQL Injection. This issue affects W4 Post List: from n/a through 3.0.6...
CVE-2026-96826 WordPress W4 Post List plugin <= 3.0.6 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Shazzad Hossain Khan W4 Post List allows Blind SQL Injection. This issue affects W4 Post List: from n/a through 3.0.6...
WordPress W4 Post List plugin <= 3.0.6 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin W4 Post List versions = 3.0.6...
CVE-2026-95601
Unauthenticated SQL Injection in Product Filter by WBW = 3.1.7 versions...
CVE-2026-95590
Subscriber SQL Injection in Tainacan = 1.2.0 versions...
CVE-2026-95593
Editor SQL Injection in Ultimeter = 3.0.8 versions...
CVE-2026-95522
Shop manager SQL Injection in Easy Digital Downloads = 3.7.0 versions...