3139 matches found
CVE-2025-9947 Custom 404 Pro <= 3.12.0 - Authenticated (Administrator+) SQL Injection via `path` Parameter
The Custom 404 Pro plugin for WordPress is vulnerable to time-based SQL Injection via the ‘path’ parameter in all versions up to, and including, 3.12.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible...
CVE-2025-9947
CVE-2025-9947 affects the WordPress plugin Custom 404 Pro . All versions up to 3.12.0 are vulnerable to a time-based SQL Injection via the path parameter due to insufficient escaping and query preparation. An authenticated attacker with Administrator+ privileges can append SQL statements to exist...
PT-2025-41682
Name of the Vulnerable Software and Affected Versions Custom 404 Pro plugin for WordPress versions prior to 3.13.0 Description The Custom 404 Pro plugin for WordPress is susceptible to time-based SQL Injection through the path parameter. This is due to inadequate input sanitization and insufficie...
Exploit for CVE-2025-52021
CVE-2025-52021 — Time-Based Blind SQL Injection in PuneethRedd...
EUVD-2021-10765
Malware in sbrugna...
EUVD-2007-4444
Malware in sbrugna...
EUVD-2020-23212
Malware in sbrugna...
EUVD-2020-0405
Malware in sbrugna...
EUVD-2021-15098
Malware in sbrugna...
EUVD-2021-11316
Malware in sbrugna...
EUVD-2019-17123
Malware in sbrugna...
EUVD-2018-16996
Malware in sbrugna...
EUVD-2017-7753
Malware in sbrugna...
EUVD-2021-24289
Malware in sbrugna...
EUVD-2020-13577
Malware in sbrugna...
EUVD-2021-24287
Malware in sbrugna...
EUVD-2020-17570
Malware in sbrugna...
PT-2025-40938
Name of the Vulnerable Software and Affected Versions Uniclare Student Portal version 2 Description A SQL injection flaw exists in Uniclare Student Portal version 2. This allows remote attackers to inject arbitrary SQL commands through vulnerable input fields. Exploitation can involve executing...