CVE-2026-42714

The Piggly Dev Pix por Piggly (para Woocommerce) plugin for WordPress is vulnerable to Blind SQL Injection in versions up to and including 2.1.2 . This vulnerability, categorized as CWE-89 , stems from the improper neutralization of special elements used in SQL commands. The impact includes high ...

CVE-2026-42714 WordPress Pix por Piggly (para Woocommerce) plugin <= 2.1.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Piggly Dev Pix por Piggly para Woocommerce pix-por-piggly allows Blind SQL Injection.This issue affects Pix por Piggly para Woocommerce: from n/a through 2.1.2...

CVE-2026-42714 WordPress Pix por Piggly (para Woocommerce) plugin <= 2.1.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Piggly Dev Pix por Piggly para Woocommerce pix-por-piggly allows Blind SQL Injection.This issue affects Pix por Piggly para Woocommerce: from n/a through 2.1.2...

EUVD-2026-94286

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Piggly Dev Pix por Piggly para Woocommerce pix-por-piggly allows Blind SQL Injection.This issue affects Pix por Piggly para Woocommerce: from n/a through 2.1.2...

WordPress Pix por Piggly (para Woocommerce) plugin <= 2.1.2 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Pix por Piggly para Woocommerce versions = 2.1.2...

cve-2025-57819-freepbx-range

CVE-2025-57819 FreePBX Cyber Range Isolated educational cyber-range for CVE-2025-57819 CWE-89, CWE-288. Original FreePBX-compatible training application — not official Sangoma FreePBX. Quick start git clone https://github.com/shivammittal2403/cve-2025-57819-freepbx-range cd...

CVE-2026-103668

An SQL Injection vulnerability exists in the Site Search function of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary SQL query on the affected product...

EUVD-2026-94282

An SQL Injection vulnerability exists in the Site Search function of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary SQL query on the affected product...

CVE-2026-103668

An SQL Injection vulnerability exists in the Site Search function of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary SQL query on the affected product...

CVE-2026-103668

An SQL Injection vulnerability exists in the Site Search function of Movable Type . This flaw allows an unauthenticated attacker to execute arbitrary SQL queries on the affected product. The vulnerability has a High base severity (CVSS 3.0 score of 8.6). While the specific vulnerable versions are...

WordPress Leyka plugin <= 3.32.3 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Leyka versions = 3.32.3...

CVE-2026-42720

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sarah Giles Dynamic User Directory dynamic-user-directory allows Blind SQL Injection.This issue affects Dynamic User Directory: from n/a through 2.4...

CVE-2026-42721

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in SERVIT Software Solutions affiliate-toolkit affiliate-toolkit-starter allows Blind SQL Injection.This issue affects affiliate-toolkit: from n/a through 3.9.1...

CVE-2023-0630

CVE-2023-0630 CVE-2023-0630 - Slimstat Analytics 4.9.3.3 - Inyección SQL de Suscriptor+ Requisitos sqlmap instalado y un nombre de usuario y contraseña válidos con suscriptor+ Uso usage: CVE-2023-0630.py -h -w URL -u USERNAME -p PASSWORD options: -h, --help show this help message and exit -w URL,...

CVE-2026-42720 WordPress Dynamic User Directory plugin <= 2.4 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sarah Giles Dynamic User Directory dynamic-user-directory allows Blind SQL Injection.This issue affects Dynamic User Directory: from n/a through 2.4...

CVE-2026-42720

The Dynamic User Directory WordPress plugin (versions up to and including 2.4 ) is vulnerable to a Blind SQL Injection due to improper neutralization of special elements used in an SQL command. This vulnerability allows an attacker to execute unauthorized database queries. No specific remediation...

CVE-2026-42720 WordPress Dynamic User Directory plugin <= 2.4 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sarah Giles Dynamic User Directory dynamic-user-directory allows Blind SQL Injection.This issue affects Dynamic User Directory: from n/a through 2.4...

EUVD-2026-94263

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sarah Giles Dynamic User Directory dynamic-user-directory allows Blind SQL Injection.This issue affects Dynamic User Directory: from n/a through 2.4...

WordPress Dynamic User Directory plugin <= 2.4 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Dynamic User Directory versions = 2.4...

CVE-2026-42721 WordPress affiliate-toolkit plugin <= 3.9.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in SERVIT Software Solutions affiliate-toolkit affiliate-toolkit-starter allows Blind SQL Injection.This issue affects affiliate-toolkit: from n/a through 3.9.1...