WordPress WPML Multilingual & Multicurrency for WooCommerce plugin <= 5.5.7 - Authenticated (Shop Manager+) SQL Injection vulnerability

Authenticated Shop Manager+ SQL Injection vulnerability discovered by Muni Nitish Kumar Yaddala Stranger825 in WordPress Plugin WooCommerce Multilingual & Multicurrency versions = 5.5.7...

PT-2026-103168

Contributor SQL Injection in Easy Pricing Tables = 4.1.2 versions...

PT-2026-103154

Administrator SQL Injection in WP Activity Log = 5.6.6 versions...

PT-2026-103167

Author SQL Injection in Quiz Cat = 3.1.1 versions...

PT-2026-103125

Name of the Vulnerable Software and Affected Versions OS4ED openSIS-Classic versions prior to 9.4 Description A security flaw in the Student Search component allows remote attackers to perform SQL injection. This occurs through the manipulation of the cust argument within the...

PT-2026-103348

🚨 CVE-2026-103231 A vulnerability was identified in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. The affected element is the function mysqli query of the file User/cancel.php of the component Order Cancellation. The manipulation of the argument ID...

PT-2026-103116

A vulnerability was determined in OS4ED openSIS-Classic up to 9.3. The affected element is the function save action of the file modules/students/Student.php of the component General Information Tab. Executing a manipulation of the argument students can lead to sql injection. The attack may be...

PT-2026-103298

Name of the Vulnerable Software and Affected Versions JCTables version 1.21.1 Description An unauthenticated SQL injection exists in the front-end CRUD API controller. The component fails to perform Joomla token validation and authentication checks on any task. Table names, column names, and valu...

PT-2026-103086

Name of the Vulnerable Software and Affected Versions Moodle affected versions not specified Description An authenticated attacker with access to the question bank web service can submit unsanitized input directly into database queries, leading to a SQL Structured Query Language injection. This...

PT-2026-103014

A security flaw has been discovered in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer 0/admins/assessments/examproper/exam-delete.php. The manipulation of the argument test id results in sql injection. The attack can be...

PT-2026-103019

A security flaw has been discovered in SourceCodester Car Driving School Management System 1.0. Impacted is an unknown function of the file /classes/Master.php?f=save enrollment. The manipulation results in sql injection. The attack can be executed remotely. The exploit has been released to the...

PT-2026-103191

Author SQL Injection in WP ERP = 1.17.9 versions...

PT-2026-103211

Administrator SQL Injection in Admin Notices Manager = 1.6.0 versions...

PT-2026-103157

Unauthenticated SQL Injection in WP Data Access = 5.5.84 versions...

PT-2026-103190

Administrator SQL Injection in Estatik = 4.3.5 versions...

PT-2026-103174

Name of the Vulnerable Software and Affected Versions GamiPress versions prior to 8.0.3 Description An improper neutralization of special elements used in an SQL command allows for unauthenticated Blind SQL Injection. Blind SQL Injection is a technique where an attacker asks the database true or...

PT-2026-103273

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Dolusoft Software Technologies SOPLOG allows SQL Injection. This issue affects SOPLOG: before Soplog 2026.9.4.1...

PT-2026-103207

Unauthenticated SQL Injection in Books Gallery = 4.8.3 versions...

PT-2026-103269

A security vulnerability has been detected in OS4ED openSIS-Classic up to 9.3. Affected is the function db properties of the file functions/DatabaseInc.php of the component Save Data Handler. Such manipulation of the argument values leads to sql injection. The attack can be launched remotely. The...

PT-2026-103536

Name of the Vulnerable Software and Affected Versions Kiteworks Core versions prior to 9.5.0 Description A stored SQL injection exists within an administrative reporting feature. This issue allows an authenticated administrator to read sensitive data from the underlying database and potentially...