Lucene search
+L

5039 matches found

RedhatCVE
RedhatCVE
•added 2025/02/04 10:23 p.m.•12 views

CVE-2024-53793

Cross-Site Request Forgery CSRF vulnerability in jerodmoore eDoc Easy Tables edoc-easy-tables allows Blind SQL Injection.This issue affects eDoc Easy Tables: from n/a through = 1.29...

8.2CVSS7.3AI score0.0021EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/04 10:18 p.m.•18 views

CVE-2024-53817

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in acowebs Product Labels For Woocommerce aco-product-labels-for-woocommerce allows Blind SQL Injection.This issue affects Product Labels For Woocommerce: from n/a through = 1.5.8...

7.6CVSS7.3AI score0.00444EPSS
SaveExploits0References1
NVD
NVD
•added 2025/01/24 6:15 p.m.•42 views

CVE-2025-24728

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Yannick Lefebvre Bug Library bug-library allows Blind SQL Injection.This issue affects Bug Library: from n/a through = 2.1.4...

8.5CVSS0.00505EPSS
SaveExploits0References1
NVD
NVD
•added 2025/01/24 6:15 p.m.•25 views

CVE-2025-24587

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Nks Email Subscription Popup email-subscribe allows Blind SQL Injection.This issue affects Email Subscription Popup: from n/a through = 1.2.23...

7.6CVSS0.32237EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/24 12:00 a.m.•1 views

CVE-2025-24728: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Yannick Lefebvre Bug Library bug-library allows Blind SQL Injection.This issue affects Bug Library: from n/a through = 2.1.4...

8.5CVSS5.8AI score0.00505EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/24 12:00 a.m.•3 views

CVE-2025-24587: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Nks Email Subscription Popup email-subscribe allows Blind SQL Injection.This issue affects Email Subscription Popup: from n/a through = 1.2.23...

7.6CVSS5.8AI score0.32237EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/24 12:00 a.m.•2 views

CVE-2025-24659: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Shahjada WPDM – Premium Packages wpdm-premium-packages allows Blind SQL Injection.This issue affects WPDM – Premium Packages: from n/a through = 5.9.6...

7.6CVSS5.8AI score0.00966EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/24 12:00 a.m.•1 views

CVE-2025-24663: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in mra13 Simple Download Monitor simple-download-monitor allows Blind SQL Injection.This issue affects Simple Download Monitor: from n/a through = 3.9.25...

7.6CVSS5.8AI score0.00585EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/22 2:29 p.m.•41 views

CVE-2025-23931 WordPress WordPress Local SEO plugin <= 2.3 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Oliver Fuhrmann WordPress Local SEO dh-local-seo allows Blind SQL Injection.This issue affects WordPress Local SEO: from n/a through = 2.3...

9.3CVSS0.00523EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/22 2:29 p.m.•6 views

CVE-2025-23931 WordPress WordPress Local SEO plugin <= 2.3 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Oliver Fuhrmann WordPress Local SEO dh-local-seo allows Blind SQL Injection.This issue affects WordPress Local SEO: from n/a through = 2.3...

9.3CVSS7.3AI score0.00523EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/22 2:29 p.m.•65 views

CVE-2025-23931

CVE-2025-23931 is a SQL Injection vulnerability affecting WordPress Local SEO (WordPress Local SEO plugin) up to version 2.3. The issue stems from improper neutralization of input in SQL commands, enabling Blind SQL Injection. Public references show the CVE-2025-23931 entry, with an explicit affe...

9.3CVSS7.3AI score0.00523EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/22 12:00 a.m.•2 views

CVE-2025-23931: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Oliver Fuhrmann WordPress Local SEO dh-local-seo allows Blind SQL Injection.This issue affects WordPress Local SEO: from n/a through = 2.3...

9.3CVSS5.8AI score0.00523EPSS
SaveExploits0References1
NVD
NVD
•added 2025/01/21 2:15 p.m.•24 views

CVE-2025-22710

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in storeapps Smart Manager smart-manager-for-wp-e-commerce allows Blind SQL Injection.This issue affects Smart Manager: from n/a through = 8.52.0...

7.6CVSS0.00833EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/21 12:00 a.m.•5 views

CVE-2025-22710: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in storeapps Smart Manager smart-manager-for-wp-e-commerce allows Blind SQL Injection.This issue affects Smart Manager: from n/a through = 8.52.0...

7.6CVSS5.8AI score0.00833EPSS
SaveExploits1References1
GithubExploit
GithubExploit
•added 2025/01/16 12:35 a.m.•275 views

Exploit for CVE-2025-22710

CVE-2025-22710 1️⃣ Component type WordPress plugin 2️...

7.6CVSS9.8AI score0.00833EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/16 12:00 a.m.•1 views

CVE-2025-23912: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Philipp Speck WordPress Custom Sidebar wordpress-custom-sidebar allows Blind SQL Injection.This issue affects WordPress Custom Sidebar: from n/a through = 2.3...

8.5CVSS5.8AI score0.00505EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/14 2:10 p.m.•70 views

CVE-2023-37931

The CVE corresponds to Fortinet FortiVoice Entreprise SQL injection, where improper neutralization of SQL elements enables a blind SQLi via crafted HTTP/HTTPS requests. Affected: FortiVoice Entreprise 7.0.0–7.0.1 and older than 6.4.8. Impact: authenticated attacker can perform a blind SQL injecti...

8.8CVSS8.9AI score0.00798EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/14 12:00 a.m.•2 views

CVE-2023-37931: Improper Neutralization of Special Elements used in an SQL Command

An improper neutralization of special elements used in an sql command 'sql injection' vulnerability CWE-88 in FortiVoice Entreprise version 7.0.0 through 7.0.1 and before 6.4.8 allows an authenticated attacker to perform a blind sql injection attack via sending crafted HTTP or HTTPS requests...

8.8CVSS5.8AI score0.00798EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/09 5:10 p.m.•159 views

CVE-2025-21628

CVE-2025-21628 affects Chatwoot (conversation and contact filters endpoints). Before version 3.16.0, user-provided query_operator input was not sanitized, enabling an authenticated actor to inject arbitrary SQL into the filter query (tautological WHERE clause). Impact is mitigated by upgrading to...

9.1CVSS9.3AI score0.00673EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2025/01/09 4:16 p.m.•17 views

CVE-2025-22540

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in seballero Emailing Subscription email-suscripcion allows Blind SQL Injection.This issue affects Emailing Subscription: from n/a through = 1.4.1...

9.3CVSS0.00391EPSS
SaveExploits0References1
Rows per page
Query Builder