CVE-2026-65547

Subscriber SQL Injection in Creative Mail = 1.6.9 versions...

EUVD-2026-48105

Subscriber SQL Injection in Dokan Pro = 5.0.2 versions...

CVE-2026-65494

CVE-2026-65494 affects WordPress via the Dokan Pro plugin ≤ 5.0.2, with a Subscriber SQL Injection vulnerability. The connected data confirms the affected component and the vulnerability class (SQL injection) but does not provide exploit details, affected tables/parameters, or a patch/version to ...

CVE-2025-69094

Subscriber SQL Injection in Unicamp = 2.2.2 versions...

CVE-2026-56064: Improper Neutralization of Special Elements used in an SQL Command

Subscriber SQL Injection in Tourfic = 2.22.5 versions...

CVE-2026-54838

Subscriber SQL Injection in WC Vendors Marketplace = 2.6.8 versions...

CVE-2025-69135

Subscriber SQL Injection in Events Schedule - WordPress Events Calendar Plugin = 2.7.2 versions...

EUVD-2026-36976

Subscriber SQL Injection in MasterStudy LMS = 3.7.25 versions...

CVE-2026-52697

Subscriber SQL Injection in Taskbuilder = 5.0.7 versions...

CVE-2026-52700

Subscriber SQL Injection in WCMultiShipping = 3.0.2 versions...

PT-2026-49493

Subscriber SQL Injection in ELEX WordPress HelpDesk & Customer Ticketing System = 3.3.6 versions...

CVE-2026-48874: Improper Neutralization of Special Elements used in an SQL Command

Subscriber SQL Injection in GamiPress = 7.8.7 versions...

Sql injection

Auth. subscriber+ SQL Injection SQLi vulnerability in MainWP MainWP Maintenance Extension plugin = 4.1.1 versions...