242816 matches found
GO-2024-2520 vulnerabilities
Vulnerabilities for packages: grafana-fips...
GO-2025-3384 vulnerabilities
Vulnerabilities for packages: grafana-fips, grafana...
GO-2023-1704 vulnerabilities
Vulnerabilities for packages: go, kubeflow-katib...
GO-2025-3953 vulnerabilities
Vulnerabilities for packages: temporal...
GO-2026-4465 vulnerabilities
Vulnerabilities for packages: spicedb...
GO-2023-2020 vulnerabilities
Vulnerabilities for packages: promxy, prometheus-alertmanager...
GO-2025-3607 vulnerabilities
Vulnerabilities for packages: tailscale, harbor...
GO-2023-1703 vulnerabilities
Vulnerabilities for packages: go, kubeflow-katib...
GO-2020-0005 vulnerabilities
Vulnerabilities for packages: dgraph...
WordPress Events Manager plugin < 7.4.1 - Subscriber+ Booking Consent Record Tampering via SQL Injection vulnerability
Subscriber+ Booking Consent Record Tampering via SQL Injection vulnerability discovered by Jakub Herman in WordPress Plugin Events Manager versions 7.4.1...
WordPress Form Maker by 10Web plugin < 1.15.45 - Subscriber+ SQL Injection via display_name vulnerability
Subscriber+ SQL Injection via displayname vulnerability discovered by Revanth Meesala in WordPress Plugin Form Maker by 10Web versions 1.15.45...
Exploit for CVE-2026-72550
CVE-2026-72550 — Friendica Unauthenticated SQL Injection Un...
CVE-2026-16810
The Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder plugin for WordPress is vulnerable to generic SQL Injection via the 'dataqueryCondition' parameter in all versions up to, and including, 3.2.0 due to insufficient escaping on the user supplied parameter...
CVE-2026-15205
The Paymob for WooCommerce WordPress plugin before 4.1.9 does not properly sanitise a client-supplied identifier before using it in a SQL query within its public, unauthenticated payment callback, and performs this query before verifying the payment provider's HMAC signature. This allows...
CVE-2026-12743
The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin for WordPress is vulnerable to time-based SQL Injection via the 'orderby' parameter in all versions up to, and including, 3.8.8 due to insufficient escaping on the user supplied parameter and lack of sufficient...
CVE-2026-15205 Paymob for WooCommerce < 4.1.9 - Unauthenticated SQL Injection via Paymob Callback Pixel Lookup
The Paymob for WooCommerce WordPress plugin before 4.1.9 does not properly sanitise a client-supplied identifier before using it in a SQL query within its public, unauthenticated payment callback, and performs this query before verifying the payment provider's HMAC signature. This allows...
CVE-2026-15205
The Paymob for WooCommerce WordPress plugin before 4.1.9 does not properly sanitise a client-supplied identifier before using it in a SQL query within its public, unauthenticated payment callback, and performs this query before verifying the payment provider's HMAC signature. This allows...
CVE-2026-15205
The Paymob for WooCommerce WordPress plugin before 4.1.9 does not properly sanitise a client-supplied identifier before using it in a SQL query within its public, unauthenticated payment callback, and performs this query before verifying the payment provider's HMAC signature. This allows...
EUVD-2026-58596
The Paymob for WooCommerce WordPress plugin before 4.1.9 does not properly sanitise a client-supplied identifier before using it in a SQL query within its public, unauthenticated payment callback, and performs this query before verifying the payment provider's HMAC signature. This allows...
CVE-2026-15205 Paymob for WooCommerce < 4.1.9 - Unauthenticated SQL Injection via Paymob Callback Pixel Lookup
The Paymob for WooCommerce WordPress plugin before 4.1.9 does not properly sanitise a client-supplied identifier before using it in a SQL query within its public, unauthenticated payment callback, and performs this query before verifying the payment provider's HMAC signature. This allows...