CVE-2026-39746: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in Booknetic = 4.8.5 versions...

CVE-2026-32581: Improper Neutralization of Special Elements used in an SQL Command

Subscriber SQL Injection in Mooberry Book Manager 4.16.2 versions...

CVE-2026-32580: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in WooCommerce Lottery = 2.2.9 versions...

CVE-2026-25434: Improper Neutralization of Special Elements used in an SQL Command

Subscriber SQL Injection in WP2LEADS = 3.5.7 versions...

CVE-2026-41555: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email = 1.5.9 versions...

CVE-2025-45871: Improper Neutralization of Special Elements used in an SQL Command

LogicalDOC Enterprise up to and for 9.1.1 is vulnerable to blind SQL injection in the WorkflowsDataServlet component, allowing authenticated user to manipulate SQL queries via crafted workflow template name...

CVE-2026-79798: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow a low-privileged authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitra...

CVE-2026-42416: Improper Neutralization of Special Elements used in an SQL Command

Subscriber SQL Injection in UDesign Core = 4.15.0 versions...

PT-2026-106395

Name of the Vulnerable Software and Affected Versions WooCommerce Appointments versions prior to 5.3.3 Description An unauthenticated SQL Injection exists in the software. SQL Injection is a type of vulnerability that allows an attacker to interfere with the queries that an application makes to i...

CVE-2026-76754: Improper Neutralization of Special Elements used in a Command

A vulnerability in an affected interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitrary database commands...

CVE-2026-79794: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitrary database...

PT-2026-106473

Subscriber SQL Injection in ListingPro = 2.9.12 versions...

CVE-2025-45871

LogicalDOC Enterprise, version 9.1.1 and below , is vulnerable to a blind SQL injection within the WorkflowsDataServlet component. This flaw allows an authenticated user to manipulate SQL queries by providing a crafted workflow template name . The impact involves unauthorized data access or manip...

PT-2026-106475

Subscriber SQL Injection in UDesign Core = 4.15.0 versions...

PT-2026-106719

A vulnerability was found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. The affected element is the function mysql query of the file admin/login.php of the component Administrator Login Endpoint. The manipulation of the argument username/password resul...

CVE-2025-45871

LogicalDOC Enterprise up to and for 9.1.1 is vulnerable to blind SQL injection in the WorkflowsDataServlet component, allowing authenticated user to manipulate SQL queries via crafted workflow template name...

PT-2026-106453

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Serhii Pasyuk Gmedia Photo Gallery grand-media allows Blind SQL Injection.This issue affects Gmedia Photo Gallery: from n/a through 1.25.1...

PT-2026-106394

Name of the Vulnerable Software and Affected Versions WP2LEADS versions prior to 3.5.8 Description An SQL injection flaw exists that allows a user with subscriber privileges to execute unauthorized database queries. Recommendations Update to a version newer than 3.5.7...

CVE-2026-39771: Improper Neutralization of Special Elements used in an SQL Command

Subscriber SQL Injection in Buddyboss Platform = 3.1.0 versions...

PT-2026-106407

Name of the Vulnerable Software and Affected Versions Mooberry Book Manager version 4.16.2 Description An SQL Injection issue exists in the subscriber component, allowing an attacker to interfere with the application's database queries. Recommendations At the moment, there is no information about...