CVE-2024-43918

Wordpress WBW Product Table Pro = 1.9.4 - 認証されていない任意のSQL実行からリモートコード実行 CVE-2024-43918 WordPress用プラグインWBW Product Table Proは、バージョン1.9.4およびそれ以前の全バージョンにおいて、関数に対する機能チェックが欠落しているため、認証されていない任意のSQL実行の脆弱性があります。これにより、認証されていない攻撃者が任意のSQLクエリを実行し、機密データを窃取したり、脆弱なサイトへの昇格したアクセスを取得したりすることが可能です。...

EUVD-2025-17496

Malicious code in bioql PyPI...

EUVD-2023-56225

Malicious code in bioql PyPI...

CVE-2025-31059

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in woobewoo WBW Product Table PRO woo-producttables-pro allows SQL Injection.This issue affects WBW Product Table PRO: from n/a through = 2.2.6...

CVE-2025-31059

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in woobewoo WBW Product Table PRO woo-producttables-pro allows SQL Injection.This issue affects WBW Product Table PRO: from n/a through = 2.2.6...

CVE-2025-31059 WordPress WBW Product Table PRO plugin <= 2.2.6 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in woobewoo WBW Product Table PRO woo-producttables-pro allows SQL Injection.This issue affects WBW Product Table PRO: from n/a through = 2.2.6...

CVE-2025-31059

CVE-2025-31059 concerns the WordPress WBW Product Table PRO plugin, affecting versions 2.1.3 and earlier. The vulnerability is an SQL Injection caused by improper neutralization of input elements in SQL commands, allowing network-based exploitation with no user interaction. According to connected...

CVE-2023-51512

Cross Site Request Forgery CSRF vulnerability in WBW Product Table by WBW.This issue affects Product Table by WBW: from n/a through 1.8.6...

CVE-2024-43918

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WBW WBW Product Table PRO allows SQL Injection.This issue affects WBW Product Table PRO: from n/a through 1.9.4...

CVE-2024-43918

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WBW WBW Product Table PRO allows SQL Injection.This issue affects WBW Product Table PRO: from n/a through 1.9.4...

CVE-2024-43918

CVE-2024-43918 affects WBW Product Table Pro (WordPress) up to version 1.9.4. Root cause: improper neutralization of inputs leading to unauthenticated arbitrary SQL execution. Impact per sources: potential unauthorized data access; some documents also note possible escalation paths. Public exploi...

CVE-2024-43918 WordPress WBW Product Table PRO plugin <= 1.9.4 - Unauthenticated Arbitrary SQL Query Execution vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WBW WBW Product Table PRO allows SQL Injection.This issue affects WBW Product Table PRO: from n/a through 1.9.4...

WordPress WBW Product Table PRO Plugin <= 1.9.4 is vulnerable to SQL Injection

Software WBW Product Table PRO Type Plugin Vulnerable versions = 1.9.4 Fixed in 1.9.5 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-43918 Patch priority High CVSS severity High 10 Developer Claim ownership PSID 2c9d3f09a102 Credits Dave Jong Patchstack Required privilege...

CVE-2023-51512

Cross Site Request Forgery CSRF vulnerability in WBW Product Table by WBW.This issue affects Product Table by WBW: from n/a through 1.8.6...

CVE-2023-51512

Cross Site Request Forgery CSRF vulnerability in WBW Product Table by WBW.This issue affects Product Table by WBW: from n/a through 1.8.6...

CVE-2023-51512

CVE-2023-51512 affects the WordPress plugin Product Table by WBW . The public vulnerability report describes a Cross-Site Request Forgery (CSRF) flaw in Product Table by WBW versions up to and including 1.8.6. The vulnerability could enable an authenticated user to perform unintended actions on a...