95435 matches found
CVE-2026-59527
Unauthenticated SQL Injection in MapSVG = 8.14.0 versions...
CVE-2026-59533
Unauthenticated SQL Injection in Relevanssi Light = 1.2.2 versions...
CVE-2026-66427 WordPress WP Google Review Slider plugin <= 18.4 - SQL Injection vulnerability
Administrator SQL Injection in WP Google Review Slider = 18.4 versions...
CVE-2026-59551
The CVE-2026-59551 entry concerns the WordPress plugin rtMedia for WordPress, BuddyPress and bbPress (versions up to 4.7.10). The issue is a SQL Injection vulnerability in subscriber handling within this plugin. Public details in the provided documents specify affected software and the underlying...
CVE-2026-59551 WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.10 - SQL Injection vulnerability
Subscriber SQL Injection in rtMedia for WordPress, BuddyPress and bbPress = 4.7.10 versions...
CVE-2026-59538
CVE-2026-59538 affects the WordPress GamiPress plugin up to version 7.9.7, with an unauthenticated SQL Injection vulnerability. The issue is triggered by unauthenticated access and is exploitable over the network with low complexity and no user interaction. CVSS 3.1 metrics indicate a CRITICAL ba...
Security update for perl-DBI
This update for perl-DBI fixes the following issues CVE-2026-14380: unvalidated string eval interpolation of the Profile package name can lead to arbitrary Perl code execution bsc1271018. CVE-2026-14740: one-byte out-of-bounds read when deleting an initial SQL comment line can lead to a process...
SUSE-SU-2026:3283-1 Security update for perl-DBI
This update for perl-DBI fixes the following issues - CVE-2026-14380: unvalidated string eval interpolation of the Profile package name can lead to arbitrary Perl code execution bsc1271018. - CVE-2026-14740: one-byte out-of-bounds read when deleting an initial SQL comment line can lead to a proce...
CVE-2026-65876
CVE-2026-65876 affects the Joomla extension from joomshaper.com, specifically the SP Page Builder pre-6.7.1. The vulnerability arises from improper validation of catid parameters in the loadMoreArticles endpoint, yielding an unauthenticated SQL injection. The CVSS 4.0 vector indicates network acc...
CVE-2026-65877 Joomla Extension - joomshaper.com - Authenticated SQL injection in SP Page Builder < 6.7.1
Joomla Extension - joomshaper.com - Authenticated SQL injection in SP Page Builder 6.7.1 - Improper validation of various parameters in the media manager search and date filters lead to an SQL injection vector...
CVE-2026-65766
CVE-2026-65766 affects the Joomla extension SP Page Builder by joomshaper.com, where unauthenticated SQL injection is possible due to improper validation of order parameters in the Dynamic Content endpoint in versions earlier than 6.7.1. The vulnerability enables an attacker to leverage an SQL in...
Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data.
Summary IBM has released the below fix for IBM Db2® on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data in response to multiple vulnerabilities found in multiple components. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details...
CVE-2026-13152
The Custom Fields Account Registration For Woocommerce WordPress plugin before 1.4 does not prevent its custom registration fields from writing to the user capabilities meta key on sites that use a non-default database table prefix, so an unauthenticated user who registers an account can be grant...
EUVD-2026-49069
The Custom Fields Account Registration For Woocommerce WordPress plugin before 1.4 does not prevent its custom registration fields from writing to the user capabilities meta key on sites that use a non-default database table prefix, so an unauthenticated user who registers an account can be grant...
CVE-2026-13152
The Custom Fields Account Registration For WooCommerce WordPress plugin (versions before 1.4 ) is vulnerable to an unauthenticated privilege escalation flaw. The root cause is that the plugin fails to sanitize or whitelist protected user meta keys, such as wp_capabilities or wp_user_level, when p...
CVE-2026-13152 Custom Fields Account Registration For WooCommerce < 1.4 - Unauthenticated Privilege Escalation
The Custom Fields Account Registration For Woocommerce WordPress plugin before 1.4 does not prevent its custom registration fields from writing to the user capabilities meta key on sites that use a non-default database table prefix, so an unauthenticated user who registers an account can be grant...
Exploit for Interpretation Conflict in Wordpress
wp2shell CVE-2026-63030 + CVE-2026-60...
Exploit for SQL Injection in Wordpress
No d...
EUVD-2026-49351
SQLite 3.41 has a use-after-free vulnerability in jsonRemoveFunc of SQLite JSON module. The parsed JSON object is freed at line 3555, while line 3575 still calls jsonLookupStep with the released pointer. Remote attackers can exploit this flaw to crash the service and leak heap memory information...
