472555 matches found
CVE-2026-77075
n8n before 1.123.69, 2.x before 2.33.4, and 2.34.x before 2.34.1 contain an expression injection vulnerability in resource-locator field link preview rendering. The editor spliced the field's stored value directly into the node type's URL template without checking for expression syntax. An...
CVE-2026-77071
n8n before 1.123.69, 2.33.4, and 2.34.1 contains a PostgREST filter injection vulnerability in the Supabase node's Row Get Many, Delete, and Update operations, which built filter queries by concatenating an expression-bindable value without escaping. An attacker could inject a condition that...
CVE-2026-74013
Subscriber SQL Injection in eShipper Commerce = 2.16.13 versions...
CVE-2026-73993
Unauthenticated PHP Object Injection in FundEngine = 1.7.9 versions...
CVE-2026-68566
Unauthenticated SQL Injection in BookingPress Appointment Booking Pro = 6.0.2 versions...
CVE-2026-73998
Subscriber SQL Injection in WP w3all phpBB = 3.0.5 versions...
CVE-2026-66649
Unauthenticated SQL Injection in Directory Pro = 2.5.8 versions...
CVE-2026-66672
Unauthenticated PHP Object Injection in Flatastic = 2.0 versions...
CVE-2026-66680
Unauthenticated SQL Injection in Locatoraid Store Locator = 3.9.72 versions...
CVE-2026-66609
Unauthenticated SQL Injection in TheGem Elementor = 5.12.3 versions...
CVE-2026-66592
Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress = 4.7.11 versions...
CVE-2026-66593
Unauthenticated SQL Injection in Security & Malware scan by CleanTalk = 2.184 versions...
CVE-2026-66594
Subscriber SQL Injection in WordPress Persistent Login = 3.1.0 versions...
CVE-2026-66583
Unauthenticated PHP Object Injection in Forminator = 1.57.0 versions...
CVE-2025-15688
Unauthenticated SQL Injection in Capella = 2.5.5 versions...
CVE-2026-74013
Subscriber SQL Injection in eShipper Commerce = 2.16.13 versions...
EUVD-2026-63315
Subscriber SQL Injection in eShipper Commerce = 2.16.13 versions...
CVE-2026-74013 WordPress eShipper Commerce plugin <= 2.16.13 - SQL Injection vulnerability
Subscriber SQL Injection in eShipper Commerce = 2.16.13 versions...
CVE-2026-73998
The WordPress WP w3all phpBB plugin (≤ 3.0.5) has a SQL injection vulnerability exploitable by authenticated subscribers with network access; no patch version or in-the-wild exploitation details are provided in the documents.