CVE-2026-14554

CVE-2026-14554 affects the WordPress plugin Check & Log Email, vulnerable in versions before 2.0.15. The flaw arises from improper sanitization and escaping of parameters used in SQL queries, enabling SQL injection by users with administrator privileges. The description does not provide exploitat...

CVE-2019-25575

SimplePress CMS 1.0.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'p' and 's' parameters. Attackers can send GET requests with crafted SQL payloads to extract sensitive database information...