CVE-2025-39510

CVE-2025-39510 affects the WordPress plugin “Pinterest Automatic Pin” (ValvePress). The issue is an SQL Injection due to improper neutralization of inputs in the plugin prior to version 4.19.0. Affected versions are those before 4.19.0 (reported as

CVE-2025-49059 WordPress CleverReach® WP Plugin <= 1.5.20 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in CleverReach® CleverReach® WP cleverreach-wp allows SQL Injection.This issue affects CleverReach® WP: from n/a through = 1.5.20...

CVE-2025-49267 WordPress Frontend Admin by DynamiApps <= 3.28.3 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Shabti Kaplan Frontend Admin by DynamiApps allows Blind SQL Injection. This issue affects Frontend Admin by DynamiApps: from n/a through 3.28.3...

CVE-2025-52720

CVE-2025-52720 affects WordPress plugins: Super Store Finder (versions =7.5) to mitigate.

CVE-2025-52820 WordPress WooCommerce Point Of Sale (POS) <= 1.4 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in infosoftplugin WooCommerce Point Of Sale POS woo-point-of-salepos allows SQL Injection.This issue affects WooCommerce Point Of Sale POS: from n/a through = 1.4...

CVE-2025-8957 Campcodes Online Flight Booking Management System flights.php sql injection

A vulnerability was determined in Campcodes Online Flight Booking Management System 1.0. Affected is an unknown function of the file /flights.php. The manipulation of the argument departureairportid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclos...

CVE-2025-8953

A vulnerability was determined in SourceCodester COVID 19 Testing Management System 1.0. Affected by this issue is some unknown functionality of the file /checkavailability.php. The manipulation of the argument employeeid leads to sql injection. The attack may be launched remotely. The exploit ha...

CVE-2025-8952

A vulnerability was found in Campcodes Online Flight Booking Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/ajax.php?action=login of the component Login. The manipulation of the argument Username leads to sql injection. The attack can be...

CVE-2025-8954 PHPGurukul Hospital Management System doctor-specilization.php sql injection

A vulnerability was identified in PHPGurukul Hospital Management System 4.0. This affects an unknown part of the file /admin/doctor-specilization.php. The manipulation of the argument doctorspecilization leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-8947

A vulnerability was found in projectworlds Visitor Management System 1.0. This issue affects some unknown processing of the file /querydata.php. The manipulation of the argument dateF/dateP leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public...

CVE-2025-8936 1000 Projects Sales Management System dordupdate.php sql injection

A vulnerability was determined in 1000 Projects Sales Management System 1.0. Affected by this issue is some unknown functionality of the file /superstore/dist/dordupdate.php. The manipulation of the argument select2 leads to sql injection. The attack may be launched remotely. The exploit has been...

WordPress plugin Cube Portfolio has a SQL injection vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

PT-2025-33259

Name of the Vulnerable Software and Affected Versions: RealMag777 MDTF versions through 1.3.3.7 Description: RealMag777 MDTF is susceptible to a SQL Injection issue due to improper neutralization of special elements used in an SQL command. This allows for potential SQL Injection attacks...

PT-2025-33110 · Unknown · Medical Store Management System

Name of the Vulnerable Software and Affected Versions: code-projects Medical Store Management System version 1.0 Description: A vulnerability exists in the Medical Store Management System due to a SQL injection issue. The vulnerability is related to unknown processing of the UpdateCompany.java fi...

Itsourcecode Online Tour and Travel Management System Injection Vulnerability

itsourcecode Online Tour and Travel Management System is a itsourcecode open source online tour and travel management system. An injection vulnerability exists in itsourcecode Online Tour and Travel Management System version 1.0, which is caused by incorrect manipulation of the parameter...

WordPress plugin Easy Form Builder has a SQL injection vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

WordPress plugin Frontend Admin by DynamiApps: SQL injection vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in...

PT-2025-33223 · Romancode · Mapsvg

Name of the Vulnerable Software and Affected Versions: MapSVG affected versions not specified Description: An improper neutralization of special elements used in an SQL command 'SQL Injection' vulnerability exists in RomanCode MapSVG, allowing for SQL injection. Recommendations: At the moment,...

PHPGurukul Hospital Management System security vulnerabilities

Hospital Management System is a PHP and MySQL based hospital management system. Hospital Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter docfees in the file /admin/edit-doctor.php. An...

CVE-2025-8928

CVE-2025-8928 affects code-projects’ Medical Store Management System 1.0, specifically the UpdateMedicines.java file in the Update Medicines Page. The vulnerability arises from improper handling of the argument productNameTxt, leading to SQL injection. The attack can be initiated remotely, and pu...