Lucene search
K

96 matches found

NVD
NVD
added 2026/05/13 2:17 p.m.4 views

CVE-2026-4608

The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to blind SQL Injection via the 'rid' parameter in all versions up to, and including, 5.9.8.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQ...

6.5CVSS0.00033EPSS
Exploits0References6
CVE
CVE
added 2026/05/13 1:27 p.m.6 views

CVE-2026-4608

CVE-2026-4608 affects the WordPress ProfileGrid – User Profiles, Groups and Communities plugin (versions up to and including 5.9.8.4). It describes a blind SQL Injection via the rid parameter, caused by insufficient escaping of user input and inadequate query preparation, allowing authenticated a...

6.5CVSS5.9AI score0.00033EPSS
Exploits0References6
Cvelist
Cvelist
added 2026/05/13 1:27 p.m.29 views

CVE-2026-4608 ProfileGrid <= 5.9.8.4 - Authenticated (Subscriber+) SQL Injection via 'rid' Parameter

The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to blind SQL Injection via the 'rid' parameter in all versions up to, and including, 5.9.8.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQ...

6.5CVSS0.00033EPSS
Exploits0References6
Vulnrichment
Vulnrichment
added 2026/05/13 1:27 p.m.5 views

CVE-2026-4608 ProfileGrid <= 5.9.8.4 - Authenticated (Subscriber+) SQL Injection via 'rid' Parameter

The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to blind SQL Injection via the 'rid' parameter in all versions up to, and including, 5.9.8.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQ...

6.5CVSS5.9AI score0.00033EPSS
Exploits0References6
ATTACKERKB
ATTACKERKB
added 2026/05/13 1:27 p.m.2 views

CVE-2026-4608

The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to blind SQL Injection via the 'rid' parameter in all versions up to, and including, 5.9.8.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQ...

6.5CVSS5.9AI score0.00033EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2026/05/13 12:0 a.m.5 views

PT-2026-40610

The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to blind SQL Injection via the 'rid' parameter in all versions up to, and including, 5.9.8.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQ...

6.5CVSS5.9AI score0.00033EPSS
Exploits0References6
CNNVD
CNNVD
added 2026/05/13 12:0 a.m.5 views

WordPress plugin ProfileGrid SQL注入漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

6.5CVSS5.9AI score0.00033EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 11:36 a.m.5 views

CVE-2021-41928

SQL injection in Sourcecodester Try My Recipe Recipe Sharing Website - CMS 1.0 by oretnom23, allows attackers to execute arbitrary code via the rid parameter to the viewrecipe page...

9.8CVSS8.7AI score0.00621EPSS
Exploits1References1
CNVD
CNVD
added 2025/11/12 12:0 a.m.2 views

Responsive Hotel Site roombook.php File SQL Injection Vulnerability

Responsive Hotel Site is a responsive hotel website. Responsive Hotel Site suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter rid in the file /admin/roombook.php. An attacker can exploit this vulnerability to...

9.8CVSS8.2AI score0.00029EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/11/08 2:50 p.m.3 views

CVE-2025-12857

A security vulnerability has been detected in code-projects Responsive Hotel Site 1.0. The affected element is an unknown function of the file /admin/roombook.php. Such manipulation of the argument rid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed...

9.8CVSS6.9AI score0.00029EPSS
Exploits1References1
NVD
NVD
added 2025/11/07 2:15 p.m.1 views

CVE-2025-12857

A security vulnerability has been detected in code-projects Responsive Hotel Site 1.0. The affected element is an unknown function of the file /admin/roombook.php. Such manipulation of the argument rid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed...

9.8CVSS0.00029EPSS
Exploits1References5
OSV
OSV
added 2025/11/07 2:15 p.m.3 views

CVE-2025-12857

A security vulnerability has been detected in code-projects Responsive Hotel Site 1.0. The affected element is an unknown function of the file /admin/roombook.php. Such manipulation of the argument rid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed...

9.8CVSS5.8AI score
Exploits0References5
CVE
CVE
added 2025/11/07 2:2 p.m.6 views

CVE-2025-12857

The CVE-2025-12857 issue affects code-projects Responsive Hotel Site 1.0 in /admin/roombook.php where manipulating the rid parameter triggers SQL injection. Multiple connected sources corroborate a remote-exploit scenario with publicly disclosed exploit code and the potential to access or modify ...

9.8CVSS6.7AI score0.00029EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/11/07 2:2 p.m.7 views

CVE-2025-12857 code-projects Responsive Hotel Site roombook.php sql injection

A security vulnerability has been detected in code-projects Responsive Hotel Site 1.0. The affected element is an unknown function of the file /admin/roombook.php. Such manipulation of the argument rid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed...

5.8CVSS0.00029EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/11/07 12:0 a.m.3 views

PT-2025-45423

Name of the Vulnerable Software and Affected Versions code-projects Responsive Hotel Site version 1.0 Description A security issue exists in code-projects Responsive Hotel Site 1.0. Manipulation of the rid argument in an unknown function within the /admin/roombook.php file can lead to SQL...

5.8CVSS5.1AI score0.00029EPSS
Exploits1References7
CNNVD
CNNVD
added 2025/11/07 12:0 a.m.1 views

Code-Projects Responsive Hotel Site SQL注入漏洞

Responsive Hotel Site is a responsive hotel website. Responsive Hotel Site suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter rid in the file /admin/roombook.php. An attacker can exploit this vulnerability to...

9.8CVSS5.7AI score0.00029EPSS
Exploits1References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2007-6175

Malware in sbrugna...

2.1CVSS6.1AI score0.00093EPSS
Exploits1References12
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2014-8108

Malware in sbrugna...

4.3CVSS6.4AI score0.00909EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-25014

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00107EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-32758

Malicious code in bioql PyPI...

6.8CVSS6.7AI score0.00038EPSS
Exploits0References2
Rows per page
Query Builder