CVE-2026-104753

The Rank Math SEO WordPress plugin, in versions prior to 1.0.280 , is vulnerable to SQL injection due to insufficient sanitization and escaping of the 'per_page' parameter before it is used in a SQL query. This vulnerability allows users with high privileges, such as administrators , to perform u...

CVE-2026-104753 Rank Math SEO < 1.0.280 - Admin+ SQLi via 'per_page' Parameter

The Rank Math SEO WordPress plugin before 1.0.280 does not properly sanitise and escape a parameter before using it in a SQL query, allowing high-privilege users such as administrators to perform SQL injection attacks...

CVE-2024-32469

Decidim is a participatory democracy framework. The pagination feature used in searches and filters is subject to potential XSS attack through a malformed URL using the GET parameter "perpage". This vulnerability is fixed in 0.27.6 and 0.28.1...

CVE-2024-32469: Improper Neutralization of Input During Web Page Generation

Decidim is a participatory democracy framework. The pagination feature used in searches and filters is subject to potential XSS attack through a malformed URL using the GET parameter perpage. This vulnerability is fixed in 0.27.6 and 0.28.1...

SQL injection in searchArticles function

Description The searchArticles function in the KB module makes a call to the getSimpleResultSet function, with the perpage parameter taken from the user without sanitizing before entering the query, leading to the attacker being able to manipulate the query. Proof of Concept GET...