CVE-2026-32580 WordPress WooCommerce Lottery plugin <= 2.2.9 - SQL Injection vulnerability

Unauthenticated SQL Injection in WooCommerce Lottery = 2.2.9 versions...

CVE-2026-32580

The WordPress WooCommerce Lottery plugin in versions

CVE-2026-32580 WordPress WooCommerce Lottery plugin <= 2.2.9 - SQL Injection vulnerability

Unauthenticated SQL Injection in WooCommerce Lottery = 2.2.9 versions...

CVE-2026-32557 WordPress WooCommerce Appointments plugin <= 5.3.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BookingWP WooCommerce Appointments woocommerce-appointments allows Blind SQL Injection.This issue affects WooCommerce Appointments: from n/a through 5.3.2...

EUVD-2026-93230

Unauthenticated SQL Injection in WooCommerce Appointments = 5.3.2 versions...

CVE-2026-32557 WordPress WooCommerce Appointments plugin <= 5.3.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BookingWP WooCommerce Appointments woocommerce-appointments allows Blind SQL Injection.This issue affects WooCommerce Appointments: from n/a through 5.3.2...

CVE-2026-32557

The WooCommerce Appointments plugin for WordPress versions

EUVD-2026-93229

Subscriber SQL Injection in WP2LEADS = 3.5.7 versions...

CVE-2026-25434 WordPress WP2LEADS plugin <= 3.5.7 - SQL Injection vulnerability

Subscriber SQL Injection in WP2LEADS = 3.5.7 versions...

CVE-2026-25434 WordPress WP2LEADS plugin <= 3.5.7 - SQL Injection vulnerability

Subscriber SQL Injection in WP2LEADS = 3.5.7 versions...

CVE-2026-25434

The WP2LEADS plugin for WordPress (versions

CVE-2026-4889 SQL Injection (SQLi) in eLoanApp Platform by RDL Technologies

SQL injection SQLi vulnerability in the eLoanApp application, specifically in the POST parameter 'logina' of the user process endpoint '/ajax/users.php?op=verify'. The parameter is vulnerable to boolean-based and time-based SQL injection. Successfully exploiting this vulnerability would allow an...

CVE-2026-4889

The eLoanApp platform by RDL Technologies contains a SQL injection (SQLi) vulnerability in the '/ajax/users.php?op=verify' endpoint. The vulnerability exists in the 'logina' POST parameter, which is susceptible to both boolean-based and time-based SQL injection. Successful exploitation enables an...

CVE-2026-4889 SQL Injection (SQLi) in eLoanApp Platform by RDL Technologies

SQL injection SQLi vulnerability in the eLoanApp application, specifically in the POST parameter 'logina' of the user process endpoint '/ajax/users.php?op=verify'. The parameter is vulnerable to boolean-based and time-based SQL injection. Successfully exploiting this vulnerability would allow an...

EUVD-2026-93227

SQL injection SQLi vulnerability in the eLoanApp application, specifically in the POST parameter 'logina' of the user process endpoint '/ajax/users.php?op=verify'. The parameter is vulnerable to boolean-based and time-based SQL injection. Successfully exploiting this vulnerability would allow an...

CVE-2026-105807

A vulnerability was found in SourceCodester Simple Student Information System 1.0. This affects an unknown part of the file searchquery.php. Performing a manipulation results in sql injection. The attack can be initiated remotely...

EUVD-2026-93018

A vulnerability was found in SourceCodester Simple Student Information System 1.0. This affects an unknown part of the file searchquery.php. Performing a manipulation results in sql injection. The attack can be initiated remotely...

CVE-2026-105807 SourceCodester Simple Student Information System searchquery.php sql injection

A vulnerability was found in SourceCodester Simple Student Information System 1.0. This affects an unknown part of the file searchquery.php. Performing a manipulation results in sql injection. The attack can be initiated remotely...

CVE-2026-105807

A SQL injection vulnerability exists in SourceCodester Simple Student Information System 1.0 . The flaw is located within an unspecified part of the searchquery.php file, where improper input handling allows for remote manipulation. An attacker can exploit this to execute arbitrary SQL commands. ...

CVE-2026-105807 SourceCodester Simple Student Information System searchquery.php sql injection

A vulnerability was found in SourceCodester Simple Student Information System 1.0. This affects an unknown part of the file searchquery.php. Performing a manipulation results in sql injection. The attack can be initiated remotely...