Lucene search
+L

379 matches found

NVD
NVD
•added 2026/10/23 9:17 a.m.•9 views

CVE-2026-112860

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in xnau webdesign Participants Database participants-database allows Blind SQL Injection.This issue affects Participants Database: from n/a through 2.7.8.5...

9.3CVSS0.00323EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/23 9:17 a.m.•9 views

CVE-2026-112862

Deserialization of Untrusted Data vulnerability in xnau webdesign Participants Database participants-database allows Object Injection.This issue affects Participants Database: from n/a through 2.7.8.5...

9.8CVSS0.00408EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/23 8:00 a.m.•11 views

EUVD-2026-108630

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in xnau webdesign Participants Database participants-database allows Blind SQL Injection.This issue affects Participants Database: from n/a through 2.7.8.5...

9.3CVSS5.9AI score0.00323EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/23 8:00 a.m.•40 views

CVE-2026-112862

The Participants Database WordPress plugin (versions

9.8CVSS5.9AI score0.00408EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/23 8:00 a.m.•27 views

CVE-2026-112862 WordPress Participants Database plugin <= 2.7.8.5 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in xnau webdesign Participants Database participants-database allows Object Injection.This issue affects Participants Database: from n/a through 2.7.8.5...

9.8CVSS0.00408EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/23 8:00 a.m.•11 views

EUVD-2026-108629

Deserialization of Untrusted Data vulnerability in xnau webdesign Participants Database participants-database allows Object Injection.This issue affects Participants Database: from n/a through 2.7.8.5...

9.8CVSS5.9AI score0.00408EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/23 8:00 a.m.•14 views

CVE-2026-112862 WordPress Participants Database plugin <= 2.7.8.5 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in xnau webdesign Participants Database participants-database allows Object Injection.This issue affects Participants Database: from n/a through 2.7.8.5...

9.8CVSS5.9AI score0.00408EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/23 8:00 a.m.•13 views

CVE-2026-112860 WordPress Participants Database plugin <= 2.7.8.5 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in xnau webdesign Participants Database participants-database allows Blind SQL Injection.This issue affects Participants Database: from n/a through 2.7.8.5...

9.3CVSS5.9AI score0.00323EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/23 8:00 a.m.•18 views

CVE-2026-112860

The Participants Database plugin for WordPress (versions

9.3CVSS5.9AI score0.00323EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/23 8:00 a.m.•26 views

CVE-2026-112860 WordPress Participants Database plugin <= 2.7.8.5 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in xnau webdesign Participants Database participants-database allows Blind SQL Injection.This issue affects Participants Database: from n/a through 2.7.8.5...

9.3CVSS0.00323EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/10/23 12:00 a.m.•6 views

WordPress Participants Database deserialization injection vulnerability

WordPress Participants Database versions 2.7.8.5 and earlier contain a deserialization injection vulnerability. This vulnerability arises from the deserialization of untrusted data, potentially leading to object injection...

9.8CVSS5.9AI score0.00408EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/10/23 12:00 a.m.•7 views

WordPress Participants Database SQL injection vulnerability

WordPress Participants Database versions 2.7.8.5 and earlier contain an SQL injection vulnerability. This vulnerability stems from improper handling of special elements within SQL commands, potentially leading to blind SQL injection...

9.3CVSS6AI score0.00323EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/10/21 7:54 a.m.•9 views

WordPress Participants Database plugin <= 2.7.8.5 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Tarcísio LuchesiPoystick in WordPress Plugin Participants Database versions = 2.7.8.5...

9.3CVSS5.9AI score0.00323EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2026/10/21 7:53 a.m.•13 views

WordPress Participants Database plugin <= 2.7.8.5 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Tarcísio LuchesiPoystick in WordPress Plugin Participants Database versions = 2.7.8.5...

9.8CVSS5.9AI score0.00408EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2026/10/21 12:00 a.m.•18 views

PT-2026-121795

Name of the Vulnerable Software and Affected Versions Participants Database versions prior to 2.7.8.6 Description Deserialization of untrusted data in the xnau webdesign Participants Database allows for Object Injection. This occurs when the application deserializes data from an untrusted source...

9.8CVSS5.9AI score0.00408EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/10/21 12:00 a.m.•12 views

PT-2026-121794

Name of the Vulnerable Software and Affected Versions Participants Database versions prior to 2.7.8.6 Description An issue involving improper neutralization of special elements used in an SQL command allows for Blind SQL Injection. Blind SQL Injection is a technique where an attacker asks the...

9.3CVSS6AI score0.00323EPSS
SaveExploits0References8
NVD
NVD
•added 2026/10/20 6:17 p.m.•13 views

CVE-2026-112861

Authorization Bypass Through User-Controlled Key vulnerability in xnau webdesign Participants Database participants-database allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Participants Database: from n/a through 2.7.8.5...

6.3CVSS0.00278EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/20 5:47 p.m.•13 views

EUVD-2026-105222

Authorization Bypass Through User-Controlled Key vulnerability in xnau webdesign Participants Database participants-database allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Participants Database: from n/a through 2.7.8.5...

6.3CVSS6AI score0.00278EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/20 5:47 p.m.•13 views

CVE-2026-112861 WordPress Participants Database plugin <= 2.7.8.5 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in xnau webdesign Participants Database participants-database allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Participants Database: from n/a through 2.7.8.5...

6.3CVSS6AI score0.00278EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/20 5:47 p.m.•27 views

CVE-2026-112861

The Participants Database plugin for WordPress (versions up to 2.7.8.5 ) is vulnerable to an Insecure Direct Object Reference (IDOR) . This vulnerability is caused by an Authorization Bypass Through User-Controlled Key , where incorrectly configured access control security levels allow for unauth...

6.3CVSS6AI score0.00278EPSS
SaveExploits0References1
Rows per page
Query Builder