PT-2026-121792

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ruben Garcia GamiPress gamipress allows Blind SQL Injection.This issue affects GamiPress: from n/a through 8.0.7...

CVE-2026-112822

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AmentoTech Workreap Core workreapcore allows Blind SQL Injection.This issue affects Workreap Core: from n/a before 3.4.4...

EUVD-2026-108137

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AmentoTech Workreap Core workreapcore allows Blind SQL Injection.This issue affects Workreap Core: from n/a before 3.4.4...

CVE-2026-112822 WordPress Workreap Core plugin < 3.4.4 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AmentoTech Workreap Core workreapcore allows Blind SQL Injection.This issue affects Workreap Core: from n/a before 3.4.4...

CVE-2026-112822

The AmentoTech Workreap Core WordPress plugin is vulnerable to a Blind SQL Injection flaw due to the improper neutralization of special elements used in SQL commands. This issue affects versions prior to 3.4.4 . An attacker could potentially exploit this to interact with the underlying database. ...

CVE-2026-112822 WordPress Workreap Core plugin < 3.4.4 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AmentoTech Workreap Core workreapcore allows Blind SQL Injection.This issue affects Workreap Core: from n/a before 3.4.4...

CVE-2026-114664

Frappe Framework before 16.33.0 contains a blind SQL injection vulnerability in the frappe.desk.doctype.event.event.getevents method, which fails to properly neutralize user-supplied input before including it in SQL queries. Authenticated attackers can send crafted input to getevents and infer...

CVE-2026-114664

The Frappe Framework before version 16.33.0 is vulnerable to a blind SQL injection in the frappe.desk.doctype.event.event.get_events method. The root cause is the failure to properly neutralize user-supplied input before it is included in SQL queries. Authenticated attackers can provide crafted i...

EUVD-2026-107699

Frappe Framework before 16.33.0 contains a blind SQL injection vulnerability in the frappe.desk.doctype.event.event.getevents method, which fails to properly neutralize user-supplied input before including it in SQL queries. Authenticated attackers can send crafted input to getevents and infer...

CVE-2026-114664 Frappe before 16.33.0 Blind SQL Injection via get_events

Frappe Framework before 16.33.0 contains a blind SQL injection vulnerability in the frappe.desk.doctype.event.event.getevents method, which fails to properly neutralize user-supplied input before including it in SQL queries. Authenticated attackers can send crafted input to getevents and infer...

CVE-2026-114664

Frappe Framework before 16.33.0 contains a blind SQL injection vulnerability in the frappe.desk.doctype.event.event.getevents method, which fails to properly neutralize user-supplied input before including it in SQL queries. Authenticated attackers can send crafted input to getevents and infer...

CVE-2026-114664 Frappe before 16.33.0 Blind SQL Injection via get_events

Frappe Framework before 16.33.0 contains a blind SQL injection vulnerability in the frappe.desk.doctype.event.event.getevents method, which fails to properly neutralize user-supplied input before including it in SQL queries. Authenticated attackers can send crafted input to getevents and infer...

PT-2026-121380

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AmentoTech Workreap Core workreap core allows Blind SQL Injection.This issue affects Workreap Core: from n/a before 3.4.4...

PT-2026-120946

Frappe Framework before 16.33.0 contains a blind SQL injection vulnerability in the frappe.desk.doctype.event.event.get events method, which fails to properly neutralize user-supplied input before including it in SQL queries. Authenticated attackers can send crafted input to get events and infer...

AmentoTech Workreap Core SQL injection vulnerability

Versions of AmentoTech Workreap Core prior to 3.4.4 contain an SQL injection vulnerability. This vulnerability stems from improper handling of special elements within SQL commands, potentially leading to blind SQL injection...

CVE-2026-111852

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPdreams Ajax Search Lite ajax-search-lite allows Blind SQL Injection.This issue affects Ajax Search Lite: from n/a through 4.14.6...

CVE-2026-111852 WordPress Ajax Search Lite plugin <= 4.14.6 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPdreams Ajax Search Lite ajax-search-lite allows Blind SQL Injection.This issue affects Ajax Search Lite: from n/a through 4.14.6...

EUVD-2026-107273

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPdreams Ajax Search Lite ajax-search-lite allows Blind SQL Injection.This issue affects Ajax Search Lite: from n/a through 4.14.6...

CVE-2026-111852

The WPdreams Ajax Search Lite plugin for WordPress is vulnerable to a Blind SQL Injection flaw in versions 4.14.6 and earlier . The root cause is the improper neutralization of special elements used in an SQL command, which allows an attacker to execute malicious queries. No specific remediation ...

PT-2026-121794

Name of the Vulnerable Software and Affected Versions Participants Database versions prior to 2.7.8.6 Description An issue involving improper neutralization of special elements used in an SQL command allows for Blind SQL Injection. Blind SQL Injection is a technique where an attacker asks the...