33376 matches found
K000162387: PostgreSQL vulnerability CVE-2026-6476
Security Advisory Description SQL injection in PostgreSQL pgcreatesubscriber allows an attacker with pgcreatesubscription rights to execute arbitrary SQL as a superuser. The attack takes effect when pgcreatesubscriber next runs. Within major versions 17 and 18, minor versions before PostgreSQL 18...
CVE-2026-65491
Subscriber Broken Access Control in Query Wrangler = 1.5.57 versions...
CVE-2026-65462
Administrator SQL Injection in Uncanny Automator = 7.3.2 versions...
WordPress Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce plugin <= 2.10.22 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce versions = 2.10.22...
EUVD-2026-48127
Contributor SQL Injection in Visualizer = 4.0.6 versions...
CVE-2026-65491 WordPress Query Wrangler plugin <= 1.5.57 - Broken Access Control vulnerability
Subscriber Broken Access Control in Query Wrangler = 1.5.57 versions...
CVE-2026-65491
Subscriber Broken Access Control in Query Wrangler = 1.5.57 versions...
EUVD-2026-48102
Subscriber Broken Access Control in Query Wrangler = 1.5.57 versions...
CVE-2026-65491
Technical details for CVE-2026-65491 are not publicly available in the provided documents; monitor for updates.
CVE-2026-65491 WordPress Query Wrangler plugin <= 1.5.57 - Broken Access Control vulnerability
Subscriber Broken Access Control in Query Wrangler = 1.5.57 versions...
CVE-2026-65451
CVE-2026-65451 concerns the WordPress MapSVG plugin, affecting versions <= 8.14.0, with a SQL Injection vulnerability. The connected records specify that this is a contributor SQL injection in MapSVG
CVE-2026-65450
MapSVG WordPress plugin versions <= 8.14.0 contain a SQL Injection vulnerability in contributor handling. CVSS 3.1 base score 8.5 (HIGH); attack vector NETWORK, complexity LOW, privileges REQUIRED LOW, no user interaction. Affected: WordPress MapSVG plugin (
EUVD-2026-48215
Contributor SQL Injection in MapSVG = 8.14.0 versions...
EUVD-2026-48208
Unauthenticated SQL Injection in TrueBooker = 1.2.3 versions...
CVE-2026-61948
WordPress WPDM – Premium Packages plugin ≤ 6.2.0 is affected by unauthenticated SQL injection. The vulnerability is documented in CVE-2026-61948 with a CVSS v3.1 base score of 9.3 (CRITICAL) and a network attack vector, no privileges required, no user interaction. Details indicate the issue is an...
EUVD-2026-48192
Unauthenticated SQL Injection in MapSVG = 8.14.0 versions...
CVE-2026-59526 WordPress MapSVG plugin <= 8.14.0 - SQL Injection vulnerability
Unauthenticated SQL Injection in MapSVG = 8.14.0 versions...
EUVD-2026-48147
Contributor SQL Injection in eRoom = 1.7.1 versions...
CVE-2026-24552
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in John-Michael L'Allier Create allows Blind SQL Injection. This issue affects Create: from n/a through 2.5.3...