CVE-2026-75778

A vulnerability was identified in code-projects Task Management System 1.0. This affects the function Operation::selectwithmultiplecondition of the file /index.php of the component Login Form. Such manipulation of the argument email leads to sql injection. It is possible to launch the attack...

UBUNTU-CVE-2026-23937

The Zabbix API host.get action can be exploited by authenticated users to extract a host's PSK key leading to potential loss of data integrity...

WordPress JetAppointment plugin <= 2.5.2 - SQL Injection vulnerability

SQL Injection vulnerability discovered by dutafi in WordPress Plugin JetAppointment versions = 2.5.2...

WordPress Readabler plugin < 2.0.18 - SQL Injection vulnerability

SQL Injection vulnerability discovered by dutafi in WordPress Plugin Readabler versions 2.0.18...

WordPress License Manager for WooCommerce plugin <= 3.0.18 - SQL Injection vulnerability

SQL Injection vulnerability discovered by rootdirective.sec in WordPress Plugin License Manager for WooCommerce versions = 3.0.18...

CVE-2026-75778 code-projects Task Management System Login Form index.php select_with_multiple_condition sql injection

A vulnerability was identified in code-projects Task Management System 1.0. This affects the function Operation::selectwithmultiplecondition of the file /index.php of the component Login Form. Such manipulation of the argument email leads to sql injection. It is possible to launch the attack...

EUVD-2026-60732

A vulnerability was identified in code-projects Task Management System 1.0. This affects the function Operation::selectwithmultiplecondition of the file /index.php of the component Login Form. Such manipulation of the argument email leads to sql injection. It is possible to launch the attack...

CVE-2026-75778

Task Management System 1.0 has a SQL injection in Operation::select_with_multiple_condition within /index.php of the Login Form; the email argument is unparameterized. CVSS 7.3 (HIGH), exploitable remotely with no auth; proof-of-concept exploit is publicly available. No patch or workaround is doc...

WordPress Depicter Slider plugin <= 4.8.0 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Peng Zhou in WordPress Plugin Depicter Slider versions = 4.8.0...

WordPress Gallery by BestWebSoft plugin <= 4.7.9 - Authenticated (Editor+) SQL Injection via Gallery Image Order Array Keys vulnerability

Authenticated Editor+ SQL Injection via Gallery Image Order Array Keys vulnerability discovered by Farrukh Ziyaev in WordPress Plugin Gallery versions = 4.7.9...

WordPress WC Vendors plugin <= 2.7.0 - Authenticated (Shop Manager+) SQL Injection via 'status' Parameter vulnerability

Authenticated Shop Manager+ SQL Injection via 'status' Parameter vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin WC Vendors Marketplace versions = 2.7.0...

WordPress User Login History plugin <= 2.1.7 - Authenticated (Administrator+) SQL Injection via 'blog_id' Parameter vulnerability

Authenticated Administrator+ SQL Injection via 'blogid' Parameter vulnerability discovered by Nikola Kojic - RAS-IT in WordPress Plugin User Login History versions = 2.1.7...

WordPress Slider Hero with Video Background, Animation plugin <= 9.1.7 - Authenticated (Administrator+) SQL Injection via 'description' Slide Field (Second-Order via Duplicate) vulnerability

Authenticated Administrator+ SQL Injection via 'description' Slide Field Second-Order via Duplicate vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin Slider Hero versions = 9.1.7...

WordPress Quiz and Survey Master (QSM) plugin <= 11.2.1 - Authenticated (Contributor+) SQL Injection via 'randon_category' Quiz Option vulnerability

Authenticated Contributor+ SQL Injection via 'randoncategory' Quiz Option vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin Quiz And Survey Master versions = 11.2.1...

WordPress Super Store Finder plugin <= 7.8 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Denver Jackson in WordPress Plugin Super Store Finder versions = 7.8...

WordPress Affiliates Manager plugin <= 2.9.53 - SQL Injection vulnerability

SQL Injection vulnerability discovered by 20kilograma in WordPress Plugin Affiliates Manager versions = 2.9.53...

WordPress Sticky Chat Widget plugin <= 1.4.2 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Nguyen Ba Khanh - HPT Vietnam Corporation in WordPress Plugin Sticky Chat Widget versions = 1.4.2...

Exploit for SQL Injection in Piccolo-Orm Piccolo

No d...

ZeroDay vulnerabilities are exploited in GeoTools through OpenGeo

GeoTools, a widely used open-source Java library for geospatial data, has released updates to address the ZeroDay SQL injection vulnerability in the execution of OGC filter functions when used with JDBCDataStore and other data stores. This vulnerability is an older one, and it has recently been...

WordPress NEX-Forms plugin <= 9.2.4 - Authenticated (Admin+) SQL Injection via 'additional_params' Parameter vulnerability

Authenticated Admin+ SQL Injection via 'additionalparams' Parameter vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin NEX-Forms versions = 9.2.4...