327734 matches found
MINI-6998-35G2-7962
Bulletin has no description...
CVE-2026-16146
CVE-2026-16146 affects the WordPress plugin “Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms.” All versions up to 5.1 are affected by a generic SQL Injection in Pattern JSON Keys/Values caused by insufficient escaping of user-supplied input and inadequate query preparation. Th...
EUVD-2026-58858
The Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe plugin for WordPress is vulnerable to Second-Order SQL Injection via MultipleFiles Second-Order Payload via 'cgmultiplefilesforpost' - 'cgRealId' in all versions up to, and including, 30.0.7 due to insufficient escaping ...
EUVD-2026-58855
The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to generic SQL Injection via the 'tagquery' parameter in all versions up to, and including, 4.5.14 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...
CVE-2026-15341
creationtimestamp| type| source ---|---|--- 2026-08-15 03:00:23+00:00| seen| https://infosec.exchange/users/offseq/statuses/117097288379770973 2026-08-15 03:00:25+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mt3olr7vcm2a 2026-08-15 03:20:04+00:00| seen|...
PostgreSQL psql COPY FROM STDIN early failure processes data lines as psql commands
...
CVE-2026-12128 Pinpoint Booking System <= 2.9.9.6.8 - Unauthenticated Improper Input Validation to Price Manipulation via 'cart_data' Parameter
The Pinpoint Booking System – Version 2 plugin for WordPress is vulnerable to Price Manipulation via the cartdata parameter in all versions up to, and including, 2.9.9.6.8. This is due to the dopbspwoocommerceaddtocart AJAX action being registered via wpajaxnopriv with no authentication, no nonce...
CVE-2026-15162
The Object Sync for Salesforce plugin is vulnerable to unauthenticated SQL Injection via the wordpressobjecttype parameter of its /wp-json/object-sync-for-salesforce/push/ REST route. The route's permission callback canprocess checks only the HTTP method for the push class — no capability or nonc...
CVE-2026-16080
The Image Uploader for Welcart plugin for WordPress is vulnerable to generic SQL Injection via the 'posttitle' parameter in all versions up to, and including, 1.4.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes...
CVE-2026-49844 vulnerabilities
Vulnerabilities for packages: apache-pulsar, keycloak-config-cli, akhq, zipkin, infinispan, flink, sonarqube, wavefront-proxy, thingsboard, neo4j, opensearch, apache-tika, kafka, druid, kserve-modelmesh, strimzi-kafka-operator, solr, celeborn, spdx-tools-java, wildfly, apache-activemq-artemis,...
MINI-RMV3-64V6-X8RJ
Bulletin has no description...
MINI-7C79-FV59-4J4P
Bulletin has no description...
MINI-RX69-3W7M-Q62R
Bulletin has no description...
MINI-5PQW-RX8H-W2Q2
Bulletin has no description...
MINI-9V8W-PR4J-2MV4
Bulletin has no description...
MINI-WXRJ-PPRQ-3G8X
Bulletin has no description...
MINI-8QRH-55JG-PJGW
Bulletin has no description...
MINI-VQ6W-83HM-PHQ5
Bulletin has no description...