CVE-2026-96331

The wpdreams Ajax Search Pro WordPress plugin (versions 4.29.1 and below ) is vulnerable to a Blind SQL Injection flaw. This issue is caused by the improper neutralization of special elements used in SQL commands. An attacker could exploit this to interact with the database. No specific remediati...

EUVD-2026-95610

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in wpdreams Ajax Search Pro ajax-search-pro allows Blind SQL Injection.This issue affects Ajax Search Pro: from n/a through 4.29.1...

CVE-2026-96328 WordPress JNews - Pay Writer plugin <= 12.0.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in jegtheme JNews - Pay Writer jnews-pay-writer allows Blind SQL Injection.This issue affects JNews - Pay Writer: from n/a through 12.0.1...

CVE-2026-96329 WordPress tagDiv Opt-In Builder plugin <= 1.7.6 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in tagDiv tagDiv Opt-In Builder td-subscription allows Blind SQL Injection.This issue affects tagDiv Opt-In Builder: from n/a through 1.7.6...

CVE-2026-96330 WordPress tagDiv Opt-In Builder plugin <= 1.7.6 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in tagDiv tagDiv Opt-In Builder td-subscription allows Blind SQL Injection.This issue affects tagDiv Opt-In Builder: from n/a through 1.7.6...

CVE-2026-95599 WordPress Taskbuilder plugin <= 6.0.5 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Taskbuilder Taskbuilder taskbuilder allows Blind SQL Injection.This issue affects Taskbuilder: from n/a through 6.0.5...

EUVD-2026-95605

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Taskbuilder Taskbuilder taskbuilder allows Blind SQL Injection.This issue affects Taskbuilder: from n/a through 6.0.5...

EUVD-2026-95608

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in tagDiv tagDiv Opt-In Builder td-subscription allows Blind SQL Injection.This issue affects tagDiv Opt-In Builder: from n/a through 1.7.6...

CVE-2026-96328

The WordPress JNews - Pay Writer plugin (versions through 12.0.1 ) is vulnerable to a Blind SQL Injection flaw due to the Improper Neutralization of Special Elements used in an SQL Command . This vulnerability allows an attacker to execute unauthorized SQL queries. No specific exploit details or ...

CVE-2026-95599

The WordPress Taskbuilder plugin (versions

CVE-2026-96329

The tagDiv Opt-In Builder WordPress plugin (versions up to and including 1.7.6 ) is vulnerable to a Blind SQL Injection flaw. This vulnerability is caused by the improper neutralization of special elements used in an SQL command within the td-subscription component. An attacker could potentially ...

CVE-2026-96330

The tagDiv Opt-In Builder WordPress plugin (versions n/a through 1.7.6 ) is vulnerable to a Blind SQL Injection flaw. The root cause is the Improper Neutralization of Special Elements used in an SQL Command within the td-subscription component. This vulnerability allows an attacker to execute mal...

EUVD-2026-95607

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in jegtheme JNews - Pay Writer jnews-pay-writer allows Blind SQL Injection.This issue affects JNews - Pay Writer: from n/a through 12.0.1...

EUVD-2026-95609

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in tagDiv tagDiv Opt-In Builder td-subscription allows Blind SQL Injection.This issue affects tagDiv Opt-In Builder: from n/a through 1.7.6...

CVE-2026-94568 WordPress Pay with Vipps for WooCommerce plugin <= 6.2.0 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in WP Hosting AS Pay with Vipps for WooCommerce woo-vipps allows Object Injection.This issue affects Pay with Vipps for WooCommerce: from n/a through 6.2.0...

CVE-2026-94568

The Pay with Vipps for WooCommerce (woo-vipps ) WordPress plugin is vulnerable to PHP Object Injection due to the deserialization of untrusted data . This flaw affects versions up to and including 6.2.0 . An attacker can exploit this vulnerability to perform object injection, potentially leading ...

EUVD-2026-95600

Deserialization of Untrusted Data vulnerability in WP Hosting AS Pay with Vipps for WooCommerce woo-vipps allows Object Injection.This issue affects Pay with Vipps for WooCommerce: from n/a through 6.2.0...

CVE-2026-95607 WordPress WPLMS theme <= 4.973 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in VibeThemes WPLMS wplms allows Blind SQL Injection.This issue affects WPLMS : from n/a through 4.973...

EUVD-2026-95598

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in VibeThemes WPLMS wplmsplugin allows Blind SQL Injection.This issue affects WPLMS: from n/a before 1.9.9.8.2...

CVE-2026-96327

The VibeThemes WPLMS wplms_plugin for WordPress is vulnerable to Blind SQL Injection due to the improper neutralization of special elements used in SQL commands. This security flaw affects versions prior to 1.9.9.8.2 . Exploitation could lead to unauthorized access to the underlying database. No ...