260408 matches found
CVE-2026-41555
Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email = 1.5.9 versions...
CVE-2026-39795
Unauthenticated SQL Injection in SendPress Newsletters = 1.26.1.20 versions...
CVE-2026-39785
Unauthenticated SQL Injection in Gmedia Photo Gallery = 1.25.1 versions...
CVE-2026-39771
Subscriber SQL Injection in Buddyboss Platform = 3.1.0 versions...
CVE-2026-39764
Unauthenticated SQL Injection in Radius Booking — Booking Calendar for Appointments & Services = 1.0.19 versions...
CVE-2026-39747
Subscriber SQL Injection in Woffice = 5.4.35 versions...
CVE-2026-39746
Unauthenticated SQL Injection in Booknetic = 4.8.5 versions...
CVE-2026-32580
Unauthenticated SQL Injection in WooCommerce Lottery = 2.2.9 versions...
CVE-2026-32581
Subscriber SQL Injection in Mooberry Book Manager 4.16.2 versions...
CVE-2026-32557
Unauthenticated SQL Injection in WooCommerce Appointments = 5.3.2 versions...
CVE-2026-105317
Subscriber SQL Injection in Paid Member Subscriptions = 3.1.1 versions...
CVE-2026-25434
Subscriber SQL Injection in WP2LEADS = 3.5.7 versions...
CVE-2025-70149-SQL-Injection
CVE-2025-70149 — Исследовательский проект SQL-инъекции Обзор Проект по исследованию безопасности, демонстрирующий эксплуатацию и смягчение CVE-2025-70149, критической уязвимости SQL-инъекции CVSS 9.8/10 в системе управления членством CodeAstro v1.0. Детали CVE Поле| Значение ---|--- CVE ID|...
CVE-2026-105317 WordPress Paid Member Subscriptions plugin <= 3.1.1 - SQL Injection vulnerability
Subscriber SQL Injection in Paid Member Subscriptions = 3.1.1 versions...
EUVD-2026-93089
Subscriber SQL Injection in Paid Member Subscriptions = 3.1.1 versions...
CVE-2026-105317
The WordPress Paid Member Subscriptions plugin versions
CVE-2026-105317 WordPress Paid Member Subscriptions plugin <= 3.1.1 - SQL Injection vulnerability
Subscriber SQL Injection in Paid Member Subscriptions = 3.1.1 versions...
CVE-2026-42417
The WordPress ARMember Premium plugin, version 7.8 and below , is vulnerable to an unauthenticated SQL Injection (CWE-89). This flaw allows an attacker to execute arbitrary SQL commands against the database. The vulnerability is categorized with a CRITICAL base severity score of 9.3 , indicating ...