220812 matches found
CNVD-2020-26585
creationtimestamp| type| source ---|---|--- 2026-08-18 19:00:04+00:00| seen| https://t.me/VulnerabilityNews/41921 2026-08-19 00:00:09+00:00| exploited| https://t.me/VulnerabilityNews/41921...
CVE-2026-49222
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend product question operations allow a low-privileged Vendor to manage questions under another Vendor's products. The admin/sql/sqlite/productquestion.sql queries...
WordPress KiviCare plugin < 4.5.2 - Doctor/Receptionist+ SQL Injection via settings/listing REST Endpoint vulnerability
Doctor/Receptionist+ SQL Injection via settings/listing REST Endpoint vulnerability discovered by Mokksh Parekh in WordPress Plugin KiviCare versions 4.5.2...
CVE-2026-49224
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend post revision operations allow a low-privileged Author to access revisions for posts owned by another Author. The admin/controller/content/revisions.php controll...
CVE-2026-49222
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend product question operations allow a low-privileged Vendor to manage questions under another Vendor's products. The admin/sql/sqlite/productquestion.sql queries...
CVE-2026-74015
Unauthenticated SQL Injection in Readabler 2.0.18 versions...
CVE-2026-73392
Unauthenticated SQL Injection in Super Store Finder = 7.8 versions...
CVE-2026-73365
Unauthenticated SQL Injection in JetAppointment = 2.5.2 versions...
CVE-2026-73345
Customer SQL Injection in License Manager for WooCommerce = 3.0.18 versions...
CVE-2026-73355
Unauthenticated SQL Injection in Affiliates Manager = 2.9.53 versions...
CVE-2026-73339
Unauthenticated SQL Injection in Modern Events Calendar 7.35.0 versions...
CVE-2026-73187
Unauthenticated SQL Injection in Sticky Chat Widget = 1.4.2 versions...
CVE-2026-66622
Unauthenticated SQL Injection in Depicter Slider = 4.8.0 versions...
CVE-2026-32466
Subscriber SQL Injection in Gravity Forms Bookings premium = 2.1 versions...
EUVD-2026-60819
Unauthenticated SQL Injection in Readabler 2.0.18 versions...
CVE-2026-74015 WordPress Readabler plugin < 2.0.18 - SQL Injection vulnerability
Unauthenticated SQL Injection in Readabler 2.0.18 versions...
CVE-2026-74015 WordPress Readabler plugin < 2.0.18 - SQL Injection vulnerability
Unauthenticated SQL Injection in Readabler 2.0.18 versions...
CVE-2026-74015
The WordPress Readabler plugin (versions before 2.0.18) has an unauthenticated SQL injection flaw allowing remote attackers to execute arbitrary SQL queries and exfiltrate sensitive data. CVSS 9.3 (Critical). PatchStack reports it; upgrading to 2.0.18 resolves the issue. No exploit code provided ...