27064 matches found
CVE-2026-16765 CodeAstro Online Classroom loginlinkadmin.php sql injection
A vulnerability was determined in CodeAstro Online Classroom 1.0. Affected by this issue is some unknown functionality of the file /OnlineClassroom/loginlinkadmin.php. Executing a manipulation of the argument aid can lead to sql injection. The attack can be executed remotely. The exploit has been...
CVE-2026-65694
Microweber CMS up to version 2.0.20 is affected by a path traversal in the static file controller. The vulnerability allows unauthenticated remote attackers to read arbitrary files by supplying directory traversal sequences in the path query parameter, exploiting normalize_path() failure to strip...
[SECURITY] [DSA 6399-1] wordpress security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6399-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 23, 2026 https://www.debian.org/security/faq -...
CVE-2026-65761
Joomla Extension - joomshaper.com - Unauthenticated SQL injection in Easy Store extension 1.0.0-2.0.1 - Improper validation of order parameters lead to an unauthenticated SQL injection in easystore, allowing full DB read access including credentials and sessions...
WordPress Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce plugin <= 2.10.22 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce versions = 2.10.22...
EUVD-2026-48127
Contributor SQL Injection in Visualizer = 4.0.6 versions...
EUVD-2026-48102
Subscriber Broken Access Control in Query Wrangler = 1.5.57 versions...
CVE-2026-65491
Technical details for CVE-2026-65491 are not publicly available in the provided documents; monitor for updates.
CVE-2026-65451
CVE-2026-65451 concerns the WordPress MapSVG plugin, affecting versions <= 8.14.0, with a SQL Injection vulnerability. The connected records specify that this is a contributor SQL injection in MapSVG
EUVD-2026-48215
Contributor SQL Injection in MapSVG = 8.14.0 versions...
CVE-2026-65450
MapSVG WordPress plugin versions <= 8.14.0 contain a SQL Injection vulnerability in contributor handling. CVSS 3.1 base score 8.5 (HIGH); attack vector NETWORK, complexity LOW, privileges REQUIRED LOW, no user interaction. Affected: WordPress MapSVG plugin (
EUVD-2026-48208
Unauthenticated SQL Injection in TrueBooker = 1.2.3 versions...
CVE-2026-61948
WordPress WPDM – Premium Packages plugin ≤ 6.2.0 is affected by unauthenticated SQL injection. The vulnerability is documented in CVE-2026-61948 with a CVSS v3.1 base score of 9.3 (CRITICAL) and a network attack vector, no privileges required, no user interaction. Details indicate the issue is an...
EUVD-2026-48192
Unauthenticated SQL Injection in MapSVG = 8.14.0 versions...
EUVD-2026-48147
Contributor SQL Injection in eRoom = 1.7.1 versions...
WordPress Relevanssi Light plugin <= 1.2.2 - SQL Injection vulnerability
SQL Injection vulnerability discovered by ParkHyunWoo in WordPress Plugin Relevanssi Light versions = 1.2.2...
CVE-2026-64873
Joomla Extension - regularlabs.com - SSRF in Cache Cleaner Pro extension - Custom query URLs could access internal or reserved network services...
CVE-2026-64873
CVE-2026-64873 affects the Joomla Extension Cache Cleaner Pro from Regular Labs. The issue is described as an SSRF vulnerability where custom query URLs could reach internal or reserved network services, implying a high-severity impact (CVSS: 3.1, AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H; base score 9...
CVE-2026-64873 Joomla Extension - regularlabs.com - SSRF in Cache Cleaner Pro extension
Joomla Extension - regularlabs.com - SSRF in Cache Cleaner Pro extension - Custom query URLs could access internal or reserved network services...