CVE-2026-65547 WordPress Creative Mail plugin <= 1.6.9 - SQL Injection vulnerability

Subscriber SQL Injection in Creative Mail = 1.6.9 versions...

EUVD-2026-53977

Subscriber SQL Injection in Creative Mail = 1.6.9 versions...

EUVD-2026-53976

Unauthenticated SQL Injection in Qode Tours = 3.1.3.1 versions...

CVE-2026-65546

CVE-2026-65546 affects the WordPress plugin Qode Tours (versions

CVE-2026-65546 WordPress Qode Tours plugin <= 3.1.3.1 - SQL Injection vulnerability

Unauthenticated SQL Injection in Qode Tours = 3.1.3.1 versions...

EUVD-2026-53969

Unauthenticated SQL Injection in WP OAuth Server = 6.2.0 versions...

CVE-2026-65520

CVE-2026-65520 concerns the WordPress plugin WP OAuth Server (vulnerable:

CVE-2026-65520 WordPress WP OAuth Server plugin <= 6.2.0 - SQL Injection vulnerability

Unauthenticated SQL Injection in WP OAuth Server = 6.2.0 versions...

CVE-2026-65508 WordPress Simply Schedule Appointments plugin <= 1.6.12.10 - SQL Injection vulnerability

Unauthenticated SQL Injection in Simply Schedule Appointments = 1.6.12.10 versions...

CVE-2026-65508

The CVE-2026-65508 entry concerns the WordPress plugin Simply Schedule Appointments (vulnerable:

CVE-2026-5134

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Loca Software Informatics Technology Ltd. Co. CMS allows SQL Injection. This issue affects CMS: through 06082026. NOTE: The vendor was contacted early about this disclosure but did not respond in a...

Azure SQL Database Elevation of Privilege Vulnerability

Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate privileges locally...

Azure SQL Database Elevation of Privilege Vulnerability

Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network...

CVE-2025-61029

A flaw was found in virtuoso-opensource. A remote attacker could exploit this vulnerability by sending specially crafted SQL statements to the sqlountry component. This could lead to a Denial of Service DoS, making the service unavailable to legitimate users...

CVE-2025-61021

A flaw was found in openlink virtuoso-opensource. This vulnerability allows an attacker to cause a Denial of Service DoS, meaning the service becomes unavailable to legitimate users. This can be achieved by sending specially crafted SQL statements to the sqlonaturaljoincond component, disrupting...

CVE-2026-5134 SQLi in Loca Software's CMS

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Loca Software Informatics Technology Ltd. Co. CMS allows SQL Injection. This issue affects CMS: through 06082026. NOTE: The vendor was contacted early about this disclosure but did not respond in a...

EUVD-2026-53928

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Loca Software Informatics Technology Ltd. Co. CMS allows SQL Injection. This issue affects CMS: through 06082026. NOTE: The vendor was contacted early about this disclosure but did not respond in a...

CVE-2026-69240

A flaw was found in Sequelize. When configured to use an Oracle database, the Sequelize Node.js Object-Relational Mapper ORM tool fails to properly escape certain date and timestamp values. This oversight allows a remote attacker to bypass security filters. By injecting malicious SQL commands, an...

CVE-2026-19020

A weakness has been identified in itsourcecode Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /servicetype.php. This manipulation of the argument editid causes sql injection. It is possible to initiate the attack remotely. The exploit has be...

CVE-2026-19021

A security vulnerability has been detected in SourceCodester Computer Repair Shop Management System 1.0. Affected by this issue is some unknown functionality of the file /classes/Master.php?f=deleteproduct. Such manipulation of the argument ID leads to sql injection. It is possible to launch the...