472695 matches found
CVE-2026-74011 WordPress InfiniteWP Client plugin <= 1.13.9 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in revmakx InfiniteWP Client allows Blind SQL Injection. This issue affects InfiniteWP Client: from n/a through 1.13.9...
CVE-2026-74011
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in revmakx InfiniteWP Client allows Blind SQL Injection. This issue affects InfiniteWP Client: from n/a through 1.13.9...
EUVD-2026-63324
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in revmakx InfiniteWP Client allows Blind SQL Injection. This issue affects InfiniteWP Client: from n/a through 1.13.9...
WordPress InfiniteWP Client plugin <= 1.13.9 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin InfiniteWP Client versions = 1.13.9...
CVE-2026-77070
n8n before 1.123.69, 2.33.4, and 2.34.1 contains a NoSQL injection vulnerability in the MongoDB node's Find, Delete, and Aggregate operations, which parse the Query parameter as JSON after expression resolution without sanitizing MongoDB operators. An attacker who can influence the resolved query...
CVE-2026-77075
n8n before 1.123.69, 2.x before 2.33.4, and 2.34.x before 2.34.1 contain an expression injection vulnerability in resource-locator field link preview rendering. The editor spliced the field's stored value directly into the node type's URL template without checking for expression syntax. An...
CVE-2026-77071
n8n before 1.123.69, 2.33.4, and 2.34.1 contains a PostgREST filter injection vulnerability in the Supabase node's Row Get Many, Delete, and Update operations, which built filter queries by concatenating an expression-bindable value without escaping. An attacker could inject a condition that...
CVE-2026-74013
Subscriber SQL Injection in eShipper Commerce = 2.16.13 versions...
CVE-2026-73993
Unauthenticated PHP Object Injection in FundEngine = 1.7.9 versions...
CVE-2026-68566
Unauthenticated SQL Injection in BookingPress Appointment Booking Pro = 6.0.2 versions...
CVE-2026-73998
Subscriber SQL Injection in WP w3all phpBB = 3.0.5 versions...
CVE-2026-66649
Unauthenticated SQL Injection in Directory Pro = 2.5.8 versions...
CVE-2026-66672
Unauthenticated PHP Object Injection in Flatastic = 2.0 versions...
CVE-2026-66680
Unauthenticated SQL Injection in Locatoraid Store Locator = 3.9.72 versions...
CVE-2026-66609
Unauthenticated SQL Injection in TheGem Elementor = 5.12.3 versions...
CVE-2026-66592
Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress = 4.7.11 versions...
CVE-2026-66594
Subscriber SQL Injection in WordPress Persistent Login = 3.1.0 versions...
CVE-2026-66593
Unauthenticated SQL Injection in Security & Malware scan by CleanTalk = 2.184 versions...