CVE-2026-62097

The WPTasty Business Directory plugin for WordPress (versions n/a through 6.4.27 ) is vulnerable to Blind SQL Injection due to the Improper Neutralization of Special Elements used in an SQL Command . This flaw allows an attacker with high privileges to execute malicious SQL queries. No specific e...

CVE-2026-82307

Dolusoft Software Technologies SOPLOG is vulnerable to an SQL injection due to the improper neutralization of special elements used in SQL commands. This vulnerability affects versions before Soplog 2026.9.4.1 . The flaw allows an attacker to execute unauthorized SQL commands, potentially leading...

EUVD-2026-89953

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Dolusoft Software Technologies SOPLOG allows SQL Injection. This issue affects SOPLOG: before Soplog 2026.9.4.1...

CVE-2026-82307 Multiple Vulnerabilities in Dolusoft Software's SOPLOG

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Dolusoft Software Technologies SOPLOG allows SQL Injection. This issue affects SOPLOG: before Soplog 2026.9.4.1...

CVE-2026-82307 Multiple Vulnerabilities in Dolusoft Software's SOPLOG

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Dolusoft Software Technologies SOPLOG allows SQL Injection. This issue affects SOPLOG: before Soplog 2026.9.4.1...

CVE-2026-97293

Contributor SQL Injection in Media LIbrary Assistant = 3.41 versions...

CVE-2026-97287

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Blind SQL Injection.This issue affects Event Tickets: from n/a through 5.29.5...

CVE-2026-96828

Administrator SQL Injection in Category Discount Woocommerce = 5.18 versions...

CVE-2026-96827

Administrator SQL Injection in Admin Notices Manager = 1.6.0 versions...

CVE-2026-96822

Unauthenticated SQL Injection in Books Gallery = 4.8.3 versions...

CVE-2026-96346

Author SQL Injection in WP ERP = 1.17.9 versions...

CVE-2026-96345

Administrator SQL Injection in Estatik = 4.3.5 versions...

CVE-2026-94177

Unauthenticated SQL Injection in GamiPress = 8.0.2 versions...

CVE-2026-94082

Author SQL Injection in Quiz Cat = 3.1.1 versions...

CVE-2026-94115

Contributor SQL Injection in Easy Pricing Tables = 4.1.2 versions...

CVE-2026-93621

Unauthenticated SQL Injection in WP Data Access = 5.5.84 versions...

CVE-2026-62085

Administrator SQL Injection in WP Activity Log = 5.6.6 versions...

CVE-2026-103116

A weakness has been identified in OS4ED openSIS-Classic up to 9.3. This impacts the function DBQuery of the file functions/GetStuListFnc.php of the component Student List Search Endpoint. This manipulation of the argument LOsort causes sql injection. The attack can be initiated remotely. The...

CVE-2026-103117

A security vulnerability has been detected in OS4ED openSIS-Classic up to 9.3. Affected is the function dbproperties of the file functions/DatabaseInc.php of the component Save Data Handler. Such manipulation of the argument values leads to sql injection. The attack can be launched remotely. The...

CVE-2026-103115

A security flaw has been discovered in OS4ED openSIS-Classic up to 9.3. This affects an unknown function of the file functions/CustomFieldsFnc.php of the component Student Search. The manipulation of the argument cust results in sql injection. It is possible to launch the attack remotely. The...