EUVD-2026-96452

Administrator SQL Injection in Frontend Admin by DynamiApps = 3.29.13 versions...

CVE-2026-42722

The Frontend Admin by DynamiApps WordPress plugin, in versions

CVE-2026-42717 WordPress Leyka plugin <= 3.32.3 - SQL Injection vulnerability

Administrator SQL Injection in Leyka = 3.32.3 versions...

EUVD-2026-96449

Administrator SQL Injection in Leyka = 3.32.3 versions...

CVE-2026-42717

The WordPress Leyka plugin (versions

EUVD-2026-96446

Subscriber SQL Injection in Qode Tours = 3.1.3.2 versions...

CVE-2026-42712

The Qode Tours WordPress plugin (versions

CVE-2026-42712 WordPress Qode Tours plugin <= 3.1.3.2 - SQL Injection vulnerability

Subscriber SQL Injection in Qode Tours = 3.1.3.2 versions...

EUVD-2026-96435

Subscriber SQL Injection in Events Manager = 7.4.6 versions...

CVE-2026-42633 WordPress Events Manager plugin <= 7.4.6 - SQL Injection vulnerability

Subscriber SQL Injection in Events Manager = 7.4.6 versions...

CVE-2026-42633

The WordPress Events Manager plugin (versions

EUVD-2026-96537

Subscriber SQL Injection in ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes = 1.5.3 versions...

CVE-2026-40800

The ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes plugin for WordPress, versions

CVE-2026-40800 WordPress ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes plugin <= 1.5.3 - SQL Injection vulnerability

Subscriber SQL Injection in ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes = 1.5.3 versions...

CVE-2026-105889

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Tickera Tickera tickera-event-ticketing-system allows Blind SQL Injection.This issue affects Tickera: from n/a through 3.6.0.6...

EUVD-2026-96381

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Tickera Tickera tickera-event-ticketing-system allows Blind SQL Injection.This issue affects Tickera: from n/a through 3.6.0.6...

CVE-2026-105889

The Tickera tickera-event-ticketing-system WordPress plugin (versions ≤ 3.6.0.6 ) is vulnerable to Blind SQL Injection due to the Improper Neutralization of Special Elements used in an SQL Command. This vulnerability allows an attacker to execute arbitrary SQL commands, potentially leading to a h...

CVE-2026-105889 WordPress Tickera plugin <= 3.6.0.6 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Tickera Tickera tickera-event-ticketing-system allows Blind SQL Injection.This issue affects Tickera: from n/a through 3.6.0.6...

wp2shell-poc

wp2shell PoC Der erste Proof-of-Concept der Pre-Auth-Timing-basierten SQL-Injection-PoC für die WordPress-REST-API-Batch-Route-Konfusionskette CVE-2026-63030 + CVE-2026-60137 Erreichte Befehlsausführung, ohne auch nur zu versuchen, das Admin-Passwort zu knacken. Betroffen: WordPress 6.9.0–6.9.4...

FreePBX-SQLi-RCE

FreePBX CVE-2025-57819 - Unauthenticated SQLi to RCE PoC Educational & Security Research Only - See Legal Notice Below Exploitation proof of concept for CVE-2025-57819, a critical unauthenticated SQL injection vulnerability in FreePBX that allows remote code execution. This PoC is published after...