CVE-2026-65761

Joomla Extension - joomshaper.com - Unauthenticated SQL injection in Easy Store extension 1.0.0-2.0.1 - Improper validation of order parameters lead to an unauthenticated SQL injection in easystore, allowing full DB read access including credentials and sessions...

K000162387: PostgreSQL vulnerability CVE-2026-6476

Security Advisory Description SQL injection in PostgreSQL pgcreatesubscriber allows an attacker with pgcreatesubscription rights to execute arbitrary SQL as a superuser. The attack takes effect when pgcreatesubscriber next runs. Within major versions 17 and 18, minor versions before PostgreSQL 18...

CVE-2026-65491

Subscriber Broken Access Control in Query Wrangler = 1.5.57 versions...

CVE-2026-65462

Administrator SQL Injection in Uncanny Automator = 7.3.2 versions...

WordPress Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce plugin <= 2.10.22 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce versions = 2.10.22...

EUVD-2026-48127

Contributor SQL Injection in Visualizer = 4.0.6 versions...

CVE-2026-65491 WordPress Query Wrangler plugin <= 1.5.57 - Broken Access Control vulnerability

Subscriber Broken Access Control in Query Wrangler = 1.5.57 versions...

CVE-2026-65491 WordPress Query Wrangler plugin <= 1.5.57 - Broken Access Control vulnerability

Subscriber Broken Access Control in Query Wrangler = 1.5.57 versions...

CVE-2026-65491

Subscriber Broken Access Control in Query Wrangler = 1.5.57 versions...

EUVD-2026-48102

Subscriber Broken Access Control in Query Wrangler = 1.5.57 versions...

CVE-2026-65491

Technical details for CVE-2026-65491 are not publicly available in the provided documents; monitor for updates.

CVE-2026-65451

CVE-2026-65451 concerns the WordPress MapSVG plugin, affecting versions &lt;= 8.14.0, with a SQL Injection vulnerability. The connected records specify that this is a contributor SQL injection in MapSVG

CVE-2026-65450

MapSVG WordPress plugin versions &lt;= 8.14.0 contain a SQL Injection vulnerability in contributor handling. CVSS 3.1 base score 8.5 (HIGH); attack vector NETWORK, complexity LOW, privileges REQUIRED LOW, no user interaction. Affected: WordPress MapSVG plugin (

EUVD-2026-48215

Contributor SQL Injection in MapSVG = 8.14.0 versions...

EUVD-2026-48208

Unauthenticated SQL Injection in TrueBooker = 1.2.3 versions...

CVE-2026-61948

WordPress WPDM – Premium Packages plugin ≤ 6.2.0 is affected by unauthenticated SQL injection. The vulnerability is documented in CVE-2026-61948 with a CVSS v3.1 base score of 9.3 (CRITICAL) and a network attack vector, no privileges required, no user interaction. Details indicate the issue is an...

EUVD-2026-48192

Unauthenticated SQL Injection in MapSVG = 8.14.0 versions...

CVE-2026-59526 WordPress MapSVG plugin <= 8.14.0 - SQL Injection vulnerability

Unauthenticated SQL Injection in MapSVG = 8.14.0 versions...

EUVD-2026-48147

Contributor SQL Injection in eRoom = 1.7.1 versions...

CVE-2026-24552

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in John-Michael L'Allier Create allows Blind SQL Injection. This issue affects Create: from n/a through 2.5.3...