Lucene search
+L

24 matches found

Nuclei
Nuclei
•added 2026/10/03 2:05 a.m.•71 views

SpeakOut Email Petitions < 2.14.15.1 - SQL Injection

The SpeakOut! Email Petitions WordPress plugin before 2.14.15.1 does not sanitise and escape the id parameter before using it in a SQL statement via the dkspeakoutsendmail AJAX action, leading to an SQL Injection exploitable by unauthenticated users. id: CVE-2022-0846 info: name: SpeakOut Email...

9.8CVSS8.1AI score0.08785EPSS
SaveExploits2References5
EUVD
EUVD
•added 2026/06/15 9:30 p.m.•23 views

EUVD-2026-36960

Unauthenticated SQL Injection in SpeakOut! Email Petitions = 4.6.5 versions...

9.3CVSS5.7AI score0.004EPSS
SaveExploits0References2
NVD
NVD
•added 2026/06/15 9:16 p.m.•18 views

CVE-2026-39530

Unauthenticated SQL Injection in SpeakOut! Email Petitions = 4.6.5 versions...

9.3CVSS0.004EPSS
SaveExploits0References1
CVE
CVE
•added 2026/06/15 8:18 p.m.•25 views

CVE-2026-39530

CVE-2026-39530 involves the WordPress plugin SpeakOut! Email Petitions, affecting versions

9.3CVSS5.8AI score0.004EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/06/15 8:18 p.m.•17 views

CVE-2026-39530 WordPress SpeakOut! Email Petitions plugin <= 4.6.5 - SQL Injection vulnerability

Unauthenticated SQL Injection in SpeakOut! Email Petitions = 4.6.5 versions...

9.3CVSS5.8AI score0.004EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/06/15 8:18 p.m.•48 views

CVE-2026-39530 WordPress SpeakOut! Email Petitions plugin <= 4.6.5 - SQL Injection vulnerability

Unauthenticated SQL Injection in SpeakOut! Email Petitions = 4.6.5 versions...

9.3CVSS0.004EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/15 12:00 a.m.•1 views

CVE-2026-39530: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in SpeakOut! Email Petitions = 4.6.5 versions...

9.3CVSS5.8AI score0.004EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/15 12:00 a.m.•25 views

PT-2026-49398

Unauthenticated SQL Injection in SpeakOut! Email Petitions = 4.6.5 versions...

9.3CVSS5.7AI score0.004EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2026/04/13 2:11 p.m.•16 views

WordPress SpeakOut! Email Petitions plugin <= 4.6.5 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Nguyen Ba Khanh in WordPress Plugin SpeakOut! Email Petitions versions = 4.6.5...

6AI score0.004EPSS
SaveExploits0Affected Software1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•12 views

EUVD-2025-2709

Malicious code in bioql PyPI...

6.5CVSS8.7AI score0.00294EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 11:34 a.m.•15 views

CVE-2025-22309

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RopeSwingHld SpeakOut! Email Petitions speakout allows DOM-Based XSS.This issue affects SpeakOut! Email Petitions: from n/a through = 4.4.2...

6.5CVSS7.2AI score0.00294EPSS
SaveExploits0References1
NVD
NVD
•added 2025/01/07 11:15 a.m.•15 views

CVE-2025-22309

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RopeSwingHld SpeakOut! Email Petitions speakout allows DOM-Based XSS.This issue affects SpeakOut! Email Petitions: from n/a through = 4.4.2...

6.5CVSS0.00294EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/07 10:48 a.m.•73 views

CVE-2025-22309

CVE-2025-22309 affects SpeakOut! Email Petitions (WordPress plugin). Initial description identifies a Cross-Site Scripting issue in SpeakOut! Email Petitions: DOM-Based XSS affecting versions up to 4.4.2. Wordfence Intelligence lists this as a Stored Cross-Site Scripting vulnerability for SpeakOu...

6.5CVSS7.2AI score0.00294EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/07 12:00 a.m.•17 views

WordPress plugin SpeakOut! Email Petitions 跨站脚本漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exist...

6.5CVSS7.7AI score0.00294EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/07 12:00 a.m.•1 views

CVE-2025-22309: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RopeSwingHld SpeakOut! Email Petitions speakout allows DOM-Based XSS.This issue affects SpeakOut! Email Petitions: from n/a through = 4.4.2...

6.5CVSS5.8AI score0.00294EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/01/06 12:26 p.m.•11 views

WordPress SpeakOut! Email Petitions plugin <= 4.4.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin SpeakOut! Email Petitions versions = 4.4.2...

6.5CVSS6.1AI score0.00294EPSS
SaveExploits0Affected Software1
VulnCheck KEV
VulnCheck KEV
•added 2023/11/30 12:00 a.m.•11 views

VulnCheck KEV: CVE-2022-0846

The SpeakOut! Email Petitions WordPress plugin before 2.14.15.1 does not sanitise and escape the id parameter before using it in a SQL statement via the dkspeakoutsendmail AJAX action, leading to an SQL Injection exploitable by unauthenticated users...

9.8CVSS8.2AI score0.08785EPSS
SaveIn wildExploits2References565
OSV
OSV
•added 2022/03/28 6:15 p.m.•12 views

CVE-2022-0846

The SpeakOut! Email Petitions WordPress plugin before 2.14.15.1 does not sanitise and escape the id parameter before using it in a SQL statement via the dkspeakoutsendmail AJAX action, leading to an SQL Injection exploitable by unauthenticated users...

9.8CVSS5.8AI score0.08785EPSS
SaveExploits2References1
NVD
NVD
•added 2022/03/28 6:15 p.m.•31 views

CVE-2022-0846

The SpeakOut! Email Petitions WordPress plugin before 2.14.15.1 does not sanitise and escape the id parameter before using it in a SQL statement via the dkspeakoutsendmail AJAX action, leading to an SQL Injection exploitable by unauthenticated users...

9.8CVSS0.08785EPSS
SaveExploits2References1
CVE
CVE
•added 2022/03/28 5:23 p.m.•115 views

CVE-2022-0846

CVE-2022-0846 affects the WordPress plugin SpeakOut! Email Petitions up to version 2.14.15.1. The vulnerability is due to improper sanitisation/escaping of the id parameter used in the SQL statement within the dk_speakout_sendmail AJAX action, allowing unauthenticated SQL injection. Exploitation ...

9.8CVSS9.9AI score0.08785EPSS
SaveIn wildExploits2References1Affected Software1
Rows per page
Query Builder