Lucene search
+L

8868 matches found

NVD
NVD
added 2025/12/09 4:18 p.m.6 views

CVE-2025-67516

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Agile Logix Store Locator WordPress agile-store-locator allows Blind SQL Injection.This issue affects Store Locator WordPress: from n/a through = 1.6.2...

8.5CVSS0.00268EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/09 2:13 p.m.36 views

CVE-2025-67518 WordPress Accordion Slider PRO plugin <= 1.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in LambertGroup Accordion Slider PRO accordionsliderpro allows Blind SQL Injection.This issue affects Accordion Slider PRO: from n/a through = 1.2...

8.5CVSS0.0028EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/09 2:13 p.m.28 views

CVE-2025-67516 WordPress Store Locator WordPress plugin <= 1.6.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Agile Logix Store Locator WordPress agile-store-locator allows Blind SQL Injection.This issue affects Store Locator WordPress: from n/a through = 1.6.2...

8.5CVSS0.00268EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/09 2:13 p.m.26 views

CVE-2025-67517 WordPress ArtPlacer Widget plugin <= 2.22.9.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in artplacer ArtPlacer Widget artplacer-widget allows Blind SQL Injection.This issue affects ArtPlacer Widget: from n/a through = 2.22.9.2...

8.5CVSS0.0028EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/09 2:13 p.m.15 views

CVE-2025-67518

The CVE-2025-67518 entry describes an SQL Injection vulnerability in the WordPress Accordion Slider PRO plugin. Affected: Accordion Slider PRO versions up to and including 1.2 (no explicit fixed version provided in the sources). Nature: Improper neutralization of SQL commands enables Blind SQL In...

8.5CVSS7.3AI score0.0028EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/09 2:13 p.m.21 views

CVE-2025-67516

CVE-2025-67516 concerns the Store Locator WordPress plugin (Store Locator WordPress, agile-store-locator) with versions up to 1.6.2. The underlying issue is an SQL Injection vulnerability caused by improper neutralization of input used in SQL commands, described as a Blind SQL Injection in public...

8.5CVSS7.2AI score0.00268EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/09 2:13 p.m.4 views

CVE-2025-67517 WordPress ArtPlacer Widget plugin <= 2.22.9.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in artplacer ArtPlacer Widget artplacer-widget allows Blind SQL Injection.This issue affects ArtPlacer Widget: from n/a through = 2.22.9.2...

8.5CVSS7.3AI score0.0028EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/09 2:13 p.m.3 views

CVE-2025-67516 WordPress Store Locator WordPress plugin <= 1.6.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Agile Logix Store Locator WordPress agile-store-locator allows Blind SQL Injection.This issue affects Store Locator WordPress: from n/a through = 1.6.2...

8.5CVSS7.2AI score0.00268EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/09 2:13 p.m.1 views

CVE-2025-67518 WordPress Accordion Slider PRO plugin <= 1.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in LambertGroup Accordion Slider PRO accordionsliderpro allows Blind SQL Injection.This issue affects Accordion Slider PRO: from n/a through = 1.2...

8.5CVSS7.3AI score0.0028EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/09 8:27 a.m.7 views

CVE-2025-66546

Nextcloud Calendar is a calendar app for Nextcloud. Prior to 4.7.19, 5.5.6, and 6.0.1, the calendar app allowed blindly booking appointments with a squential ID without known the appointment token. This vulnerability is fixed in 4.7.19, 5.5.6, and 6.0.1...

3.3CVSS6.7AI score0.00123EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/09 12:0 a.m.8 views

PT-2025-49894

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in LambertGroup Accordion Slider PRO accordion slider pro allows Blind SQL Injection.This issue affects Accordion Slider PRO: from n/a through = 1.2...

9.8CVSS7.7AI score0.0028EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/12/09 12:0 a.m.9 views

PT-2025-49893

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in artplacer ArtPlacer Widget artplacer-widget allows Blind SQL Injection.This issue affects ArtPlacer Widget: from n/a through = 2.22.9.2...

9.8CVSS7.7AI score0.0028EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/12/09 12:0 a.m.5 views

WordPress plugin Store Locator WordPress SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. WordPress plugin Store...

8.5CVSS7.9AI score0.00268EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/09 12:0 a.m.9 views

PT-2025-49892

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Agile Logix Store Locator WordPress agile-store-locator allows Blind SQL Injection.This issue affects Store Locator WordPress: from n/a through = 1.6.2...

9.8CVSS7.6AI score0.00268EPSS
SaveExploits0References3
GithubExploit
GithubExploit
added 2025/12/07 10:0 p.m.170 views

time-based-blind-sqli-exploit

Time-Based Blind SQL Injection Exploit Este repositório conté...

8AI score
SaveExploits0
GithubExploit
GithubExploit
added 2025/12/07 7:18 a.m.200 views

wshawk

WSHawk v2.0 - Professional WebSocket Security Scanner !Pyth...

6.8AI score
SaveExploits0
NVD
NVD
added 2025/12/05 5:16 p.m.14 views

CVE-2025-66546

Nextcloud Calendar is a calendar app for Nextcloud. Prior to 4.7.19, 5.5.6, and 6.0.1, the calendar app allowed blindly booking appointments with a squential ID without known the appointment token. This vulnerability is fixed in 4.7.19, 5.5.6, and 6.0.1...

3.3CVSS0.00123EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/12/05 4:49 p.m.8 views

EUVD-2025-201445

Nextcloud Calendar is a calendar app for Nextcloud. Prior to 4.7.19, 5.5.6, and 6.0.1, the calendar app allowed blindly booking appointments with a squential ID without known the appointment token. This vulnerability is fixed in 4.7.19, 5.5.6, and 6.0.1...

3.3CVSS6.2AI score0.00123EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/12/05 12:0 a.m.7 views

Nextcloud Calendar 安全漏洞

Nextcloud Calendar is an open source calendar application from Nextcloud. A security vulnerability exists in Nextcloud Calendar versions prior to 4.7.19, prior to 5.5.6, and prior to 6.0.1, which stems from the calendar application allowing blind booking of meetings, which could lead to...

3.3CVSS6.3AI score0.00123EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/12/05 12:0 a.m.16 views

PT-2025-49289

Name of the Vulnerable Software and Affected Versions Nextcloud Calendar versions prior to 4.7.19 Nextcloud Calendar versions prior to 5.5.6 Nextcloud Calendar versions prior to 6.0.1 Description The Nextcloud Calendar application contained a flaw where appointments could be booked without knowin...

3.3CVSS6.4AI score0.00123EPSS
SaveExploits0References8
Rows per page
Query Builder