CVE-2026-108125

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in wp-post-author. This issue affects wp-post-author version 4.0.0 prior to 4.1.0...

CVE-2026-108107

PHPNuxBill through 2025.3.20 contains an unauthenticated SQL injection vulnerability in the radius.php FreeRADIUS REST endpoint that interpolates request parameters into whereRaw queries. Attackers can send crafted username, macAddr or nasid parameters to the accounting or authenticate actions to...

CVE-2026-108100

HortusFox hortusfox-web before 6.2 contains an SQL injection vulnerability that allows API token holders to inject SQL by supplying crafted includeinfo values to the /api/locations/list endpoint. Attackers can place subqueries in includeinfo, which PlantsModel::getSpecificInfo concatenates into t...

CVE-2026-108125

The wp-post-author plugin is vulnerable to an SQL injection flaw due to the improper neutralization of special elements used in an SQL command. This security issue specifically affects wp-post-author version 4.0.0 prior to 4.1.0 . Exploitation of this vulnerability may result in high confidential...

CVE-2026-108125 WordPress Post Author Authenticated SQLi

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in wp-post-author. This issue affects wp-post-author version 4.0.0 prior to 4.1.0...

EUVD-2026-95821

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in wp-post-author. This issue affects wp-post-author version 4.0.0 prior to 4.1.0...

GO-2026-6610 vulnerabilities

Vulnerabilities for packages: rke2-runtime, gitlab-operator-fips, octo-sts, dex, mlrun-log-collector-fips, pyrra, kcp, crossplane-provider-aws-rds-fips, starboard-exporter, kafkaexporter-fips, crossplane-provider-aws-cloud9-fips, vexctl, cluster-proportional-autoscaler,...

GO-2026-6612 vulnerabilities

Vulnerabilities for packages: rke2-runtime, gitlab-operator-fips, octo-sts, dex, mlrun-log-collector-fips, pyrra, kcp, crossplane-provider-aws-rds-fips, starboard-exporter, kafkaexporter-fips, crossplane-provider-aws-cloud9-fips, vexctl, cluster-proportional-autoscaler,...

GO-2026-6617 vulnerabilities

Vulnerabilities for packages: rke2-runtime, gitlab-operator-fips, octo-sts, dex, mlrun-log-collector-fips, pyrra, kcp, crossplane-provider-aws-rds-fips, starboard-exporter, kafkaexporter-fips, crossplane-provider-aws-cloud9-fips, vexctl, cluster-proportional-autoscaler,...

GO-2026-6611 vulnerabilities

Vulnerabilities for packages: rke2-runtime, gitlab-operator-fips, octo-sts, dex, mlrun-log-collector-fips, pyrra, kcp, crossplane-provider-aws-rds-fips, starboard-exporter, kafkaexporter-fips, crossplane-provider-aws-cloud9-fips, vexctl, cluster-proportional-autoscaler,...

GO-2026-6603 vulnerabilities

Vulnerabilities for packages: rke2-runtime, gitlab-operator-fips, octo-sts, dex, mlrun-log-collector-fips, pyrra, kcp, crossplane-provider-aws-rds-fips, starboard-exporter, kafkaexporter-fips, crossplane-provider-aws-cloud9-fips, vexctl, cluster-proportional-autoscaler,...

CVE-2026-78659 vulnerabilities

Vulnerabilities for packages: rke2-runtime, gitlab-operator-fips, octo-sts, dex, mlrun-log-collector-fips, pyrra, kcp, crossplane-provider-aws-rds-fips, starboard-exporter, kafkaexporter-fips, crossplane-provider-aws-cloud9-fips, vexctl, cluster-proportional-autoscaler,...

CVE-2026-78669 vulnerabilities

Vulnerabilities for packages: rke2-runtime, gitlab-operator-fips, octo-sts, dex, mlrun-log-collector-fips, pyrra, kcp, crossplane-provider-aws-rds-fips, starboard-exporter, kafkaexporter-fips, crossplane-provider-aws-cloud9-fips, vexctl, cluster-proportional-autoscaler,...

GO-2026-6603 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-geoipfilter, victoriametrics, minio-object-browser, aws-privateca-issuer, traefik, argo-workflows, aws-eks-pod-identity-agent, crossplane-provider-aws-iam, lazygit, helm-push, flux-kustomize-controller, sqlexporter, dataplaneapi, knative-client, aws-nuk...

GO-2026-6610 vulnerabilities

Vulnerabilities for packages: victoriametrics, aws-privateca-issuer, traefik, argo-workflows, aws-eks-pod-identity-agent, crossplane-provider-aws-iam, lazygit, helm-push, flux-kustomize-controller, sqlexporter, dataplaneapi, knative-client, aws-nuke, k9s, direnv, flux, tigera-operator,...

GO-2026-6611 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-geoipfilter, victoriametrics, minio-object-browser, aws-privateca-issuer, traefik, argo-workflows, aws-eks-pod-identity-agent, crossplane-provider-aws-iam, lazygit, helm-push, flux-kustomize-controller, sqlexporter, dataplaneapi, knative-client, aws-nuk...

GO-2026-6612 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-geoipfilter, victoriametrics, minio-object-browser, aws-privateca-issuer, traefik, argo-workflows, aws-eks-pod-identity-agent, crossplane-provider-aws-iam, lazygit, helm-push, flux-kustomize-controller, sqlexporter, dataplaneapi, knative-client, k9s,...

CVE-2026-78659 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-geoipfilter, victoriametrics, minio-object-browser, aws-privateca-issuer, traefik, argo-workflows, aws-eks-pod-identity-agent, crossplane-provider-aws-iam, lazygit, helm-push, flux-kustomize-controller, sqlexporter, dataplaneapi, knative-client, aws-nuk...

CVE-2026-78669 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-geoipfilter, victoriametrics, minio-object-browser, aws-privateca-issuer, traefik, argo-workflows, aws-eks-pod-identity-agent, crossplane-provider-aws-iam, lazygit, helm-push, flux-kustomize-controller, sqlexporter, dataplaneapi, knative-client, aws-nuk...

CVE-2026-78660 vulnerabilities

Vulnerabilities for packages: victoriametrics, aws-privateca-issuer, traefik, argo-workflows, aws-eks-pod-identity-agent, crossplane-provider-aws-iam, lazygit, helm-push, flux-kustomize-controller, sqlexporter, dataplaneapi, knative-client, aws-nuke, k9s, direnv, flux, tigera-operator,...