CVE-2026-14189

The WPBot WordPress plugin (versions before 8.5.2 ) is vulnerable to a second-order SQL injection because it fails to validate administrator-configured field identifiers before utilizing them in a SQL query. This flaw allows users with administrator access to perform SQL injection, which is subse...

vBulletin 5.x Remote Administrator Injection

Remote administrator injection vulnerability in vBulletin upgrade.php Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...