4691 matches found
CVE-2025-22348 WordPress DynamicTags plugin <= 1.4.0 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in rtowebsites DynamicTags dynamictags allows Blind SQL Injection.This issue affects DynamicTags: from n/a through = 1.4.0...
CVE-2025-22348
CVE-2025-22348 corresponds to a SQL Injection vulnerability in the WordPress DynamicTags plugin (versions n/a through 1.4.0). Multiple connected sources describe an improper neutralization of special elements used in SQL commands (SQLi), leading to blind SQL injection. Affected component is the D...
PT-2025-4461 · Unknown · Bsk Forms Blacklist
Name of the Vulnerable Software and Affected Versions: BSK Forms Blacklist versions n/a through 3.9 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Blind SQL Injection. This means an attacker can trick a user into performing unintended actions on a...
Exploit for CVE-2025-22352
1️⃣ Component type WordPress plugin 2️⃣ Component details...
CVE-2024-56801
Tasklists provides plugin tasklists for GLPI. Versions prior to 2.0.4 have a blind SQL injection vulnerability. Version 2.0.4 contains a patch for the vulnerability...
CVE-2024-56801
Tasklists provides plugin tasklists for GLPI. Versions prior to 2.0.4 have a blind SQL injection vulnerability. Version 2.0.4 contains a patch for the vulnerability...
CVE-2024-56801 Tasklists has Blind SQL Injection in /ajax/reorder.php
Tasklists provides plugin tasklists for GLPI. Versions prior to 2.0.4 have a blind SQL injection vulnerability. Version 2.0.4 contains a patch for the vulnerability...
CVE-2024-56801
Tasklists for GLPI has a blind SQL injection vulnerability in versions prior to 2.0.4, fixed by the 2.0.4 patch. Some sources indicate the issue affects the /ajax/reorder.php endpoint. The CVE documents high impact (per CVSS data) but no exploit details are provided in the connected documents. Re...
CVE-2024-8950
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Arne Informatics Piramit Automation allows Blind SQL Injection. This issue affects Piramit Automation: before 27.09.2024...
CVE-2024-8950 SQLi in Arne Informatics' Piramit Automation
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Arne Informatics Piramit Automation allows Blind SQL Injection. This issue affects Piramit Automation: before 27.09.2024...
CVE-2024-55986
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in tiny13 Service service allows Blind SQL Injection.This issue affects Service: from n/a through = 1.0.4...
CVE-2024-55982 WordPress Share Buttons – Social Media plugin <= 1.0.2 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in richteam Share Buttons – Social Media allows Blind SQL Injection.This issue affects Share Buttons – Social Media: from n/a through 1.0.2...
CVE-2024-53815
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in DOTonPAPER Pinpoint Booking System booking-system allows Blind SQL Injection.This issue affects Pinpoint Booking System: from n/a through = 2.9.9.5.1...
CVE-2024-53807 WordPress WP Mailster plugin <= 1.8.16.0 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in brandtoss WP Mailster wp-mailster allows Blind SQL Injection.This issue affects WP Mailster: from n/a through = 1.8.16.0...
CVE-2024-53807
WP Mailster (Brandtoss) CVE-2024-53807 is a SQL Injection vulnerability affecting WP Mailster versions up to 1.8.16.0. Public docs indicate an authenticated (Contributor+) SQL injection via the orderby parameter, described as Blind SQL Injection with high impact. Patch status in the CVE details i...
CVE-2024-53817
CVE-2024-53817 affects the WordPress plugin Product Labels For Woocommerce (Acowebs) and is caused by improper neutralization of special elements in SQL commands, enabling a blind SQL injection. Affected versions are 1.5.8 and earlier. The vulnerability is described as allowing Blind SQL Injectio...
CVE-2024-53793
Cross-Site Request Forgery CSRF vulnerability in jerodmoore eDoc Easy Tables edoc-easy-tables allows Blind SQL Injection.This issue affects eDoc Easy Tables: from n/a through = 1.29...
CVE-2024-53793 WordPress eDoc Easy Tables plugin <= 1.29 - CSRF to SQL Injection vulnerability
Cross-Site Request Forgery CSRF vulnerability in eDoc Intelligence LLC eDoc Easy Tables allows Blind SQL Injection.This issue affects eDoc Easy Tables: from n/a through 1.29...
CVE-2024-53793
CVE-2024-53793 describes a CSRF to SQL Injection vulnerability in the WordPress plugin eDoc Easy Tables (versions
PT-2024-35907 · Unknown · Edoc Easy Tables
Name of the Vulnerable Software and Affected Versions: eDoc Easy Tables versions prior to 1.29 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Blind SQL Injection. This means an attacker can trick a user into performing unintended actions on a web...