PT-2026-106474

Unauthenticated SQL Injection in Porto Theme - Functionality = 3.9.3 versions...

PT-2026-106476

Unauthenticated SQL Injection in ARMember Premium = 7.8 versions...

CVE-2026-41555: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email = 1.5.9 versions...

CVE-2026-42416: Improper Neutralization of Special Elements used in an SQL Command

Subscriber SQL Injection in UDesign Core = 4.15.0 versions...

CVE-2026-42414: Improper Neutralization of Special Elements used in an SQL Command

Subscriber SQL Injection in ListingPro = 2.9.12 versions...

CVE-2026-42415: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in Porto Theme - Functionality = 3.9.3 versions...

PT-2026-106473

Subscriber SQL Injection in ListingPro = 2.9.12 versions...

PT-2026-106475

Subscriber SQL Injection in UDesign Core = 4.15.0 versions...

CVE-2026-42417: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in ARMember Premium = 7.8 versions...

CVE-2026-39771: Improper Neutralization of Special Elements used in an SQL Command

Subscriber SQL Injection in Buddyboss Platform = 3.1.0 versions...

CVE-2026-39785: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Serhii Pasyuk Gmedia Photo Gallery grand-media allows Blind SQL Injection.This issue affects Gmedia Photo Gallery: from n/a through 1.25.1...

CVE-2026-39764: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in Radius Booking — Booking Calendar for Appointments & Services = 1.0.19 versions...

CVE-2026-39747: Improper Neutralization of Special Elements used in an SQL Command

Subscriber SQL Injection in Woffice = 5.4.35 versions...

CVE-2026-39746: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in Booknetic = 4.8.5 versions...

CVE-2026-39795: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in SendPress Newsletters = 1.26.1.20 versions...

PT-2026-106395

Name of the Vulnerable Software and Affected Versions WooCommerce Appointments versions prior to 5.3.3 Description An unauthenticated SQL Injection exists in the software. SQL Injection is a type of vulnerability that allows an attacker to interfere with the queries that an application makes to i...

PT-2026-106421

Name of the Vulnerable Software and Affected Versions Woffice versions prior to 5.4.36 Description An SQL Injection issue exists in the subscriber component, allowing an attacker to interfere with the database queries. Recommendations Update to a version newer than 5.4.35...

PT-2026-106461

Unauthenticated SQL Injection in SendPress Newsletters = 1.26.1.20 versions...

PT-2026-106453

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Serhii Pasyuk Gmedia Photo Gallery grand-media allows Blind SQL Injection.This issue affects Gmedia Photo Gallery: from n/a through 1.25.1...

PT-2026-106443

Name of the Vulnerable Software and Affected Versions Buddyboss Platform versions prior to 3.1.1 Description An issue exists that allows a user with subscriber privileges to perform a SQL Injection. SQL Injection is a technique where malicious SQL statements are inserted into entry fields for...