WordPress Smart Popup by Supsystic plugin <= 1.13.2 - Authenticated (Administrator+) SQL Injection vulnerability

Authenticated Administrator+ SQL Injection vulnerability discovered by Wordfence PRISM in WordPress Plugin Popup by Supsystic versions = 1.13.2...

exploits

Exploits Miscellaneous proof of concept exploit code written at Xiphos Research for testing purposes. Current Exploits index may be out of date phpMoAdmin Remote Code Execution CVE-2015-2208 LotusCMS Remote Code Execution OSVDB-75095 ElasticSearch Remote Code Execution CVE-2015-1427 ShellShock...

Exploits

Exploits Real world and CTFs exploit POCs. Real World CVE| Short description| Exploit ---|---|--- CVE-2017-5343| Wordpress SQL Injection| POC CVE-2018-8880| Unauthenticated Lutron Quantum Bacnet v2 network info exfiltration| POC CVE-2018-11629| Default and unremovable credentials in Homeworks QS...

Multimodal-web-attack-Dataset

MWAD: A Multimodal Web Attack Dataset for AI-Driven SQL Injection Detection Overview The Multimodal Web Attack Dataset MWAD is a novel labelled cybersecurity dataset developed as part of the author's research in cybersecurity at La Trobe University, Australia. The dataset generation methodology,...

CVE-2026-69084-PoC

CVE-2026-69084 / CVE-2026-69085 — SiYuan Arbitrary SQL Execution & SQLi CVE-2026-69084: Arbitrary SQL Execution via /api/search/searchEmbedBlock CVE-2026-69085: SQL Injection via /api/filetree/searchDocs CVSS 9.9 Critical each · CWE-89 · SiYuan --check 2. DB-write proof: CREATE TABLE + INSERT...

WordPress FireBox – WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment plugin <= 3.1.13 - Authenticated (Author+) SQL Injection vulnerability

Authenticated Author+ SQL Injection vulnerability discovered by Wordfence PRISM in WordPress Plugin FireBox versions = 3.1.13...

CVE-2026-108124

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in wp-post-author. This issue affects wp-post-author before 4.1.0...

CVE-2026-108125

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in wp-post-author. This issue affects wp-post-author version 4.0.0 prior to 4.1.0...

CVE-2026-108107

PHPNuxBill through 2025.3.20 contains an unauthenticated SQL injection vulnerability in the radius.php FreeRADIUS REST endpoint that interpolates request parameters into whereRaw queries. Attackers can send crafted username, macAddr or nasid parameters to the accounting or authenticate actions to...

CVE-2026-108100

HortusFox hortusfox-web before 6.2 contains an SQL injection vulnerability that allows API token holders to inject SQL by supplying crafted includeinfo values to the /api/locations/list endpoint. Attackers can place subqueries in includeinfo, which PlantsModel::getSpecificInfo concatenates into t...

CVE-2026-108125

The wp-post-author plugin is vulnerable to an SQL injection flaw due to the improper neutralization of special elements used in an SQL command. This security issue specifically affects wp-post-author version 4.0.0 prior to 4.1.0 . Exploitation of this vulnerability may result in high confidential...

CVE-2026-108125 WordPress Post Author Authenticated SQLi

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in wp-post-author. This issue affects wp-post-author version 4.0.0 prior to 4.1.0...

EUVD-2026-95821

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in wp-post-author. This issue affects wp-post-author version 4.0.0 prior to 4.1.0...

GO-2026-6610 vulnerabilities

Vulnerabilities for packages: ratify-fips, portieris-fips, rabbitmq-cluster-operator, crossplane-provider-aws-fis-fips, contour-fips, crossplane-provider-kubernetes, crossplane-provider-aws-inspector, seaweedfs-operator-fips, rollouts-plugin-trafficrouter-gatewayapi, apko,...

GO-2026-6603 vulnerabilities

Vulnerabilities for packages: ratify-fips, portieris-fips, rabbitmq-cluster-operator, crossplane-provider-aws-fis-fips, contour-fips, crossplane-provider-kubernetes, crossplane-provider-aws-inspector, seaweedfs-operator-fips, rollouts-plugin-trafficrouter-gatewayapi, apko,...

GO-2026-6612 vulnerabilities

Vulnerabilities for packages: ratify-fips, portieris-fips, rabbitmq-cluster-operator, crossplane-provider-aws-fis-fips, contour-fips, crossplane-provider-kubernetes, crossplane-provider-aws-inspector, seaweedfs-operator-fips, rollouts-plugin-trafficrouter-gatewayapi, apko,...

GO-2026-6611 vulnerabilities

Vulnerabilities for packages: ratify-fips, portieris-fips, rabbitmq-cluster-operator, crossplane-provider-aws-fis-fips, contour-fips, crossplane-provider-kubernetes, crossplane-provider-aws-inspector, seaweedfs-operator-fips, rollouts-plugin-trafficrouter-gatewayapi, apko,...

GO-2026-6617 vulnerabilities

Vulnerabilities for packages: ratify-fips, portieris-fips, rabbitmq-cluster-operator, crossplane-provider-aws-fis-fips, contour-fips, crossplane-provider-kubernetes, crossplane-provider-aws-inspector, seaweedfs-operator-fips, rollouts-plugin-trafficrouter-gatewayapi, apko,...

CVE-2026-78659 vulnerabilities

Vulnerabilities for packages: ratify-fips, portieris-fips, rabbitmq-cluster-operator, crossplane-provider-aws-fis-fips, contour-fips, crossplane-provider-kubernetes, crossplane-provider-aws-inspector, seaweedfs-operator-fips, rollouts-plugin-trafficrouter-gatewayapi, apko,...

CVE-2026-78669 vulnerabilities

Vulnerabilities for packages: ratify-fips, portieris-fips, rabbitmq-cluster-operator, crossplane-provider-aws-fis-fips, contour-fips, crossplane-provider-kubernetes, crossplane-provider-aws-inspector, seaweedfs-operator-fips, rollouts-plugin-trafficrouter-gatewayapi, apko,...