284905 matches found
WordPress Buddyboss Platform plugin <= 3.1.0 - SQL Injection vulnerability
SQL Injection vulnerability discovered by dutafi in WordPress Plugin Buddyboss Platform versions = 3.1.0...
WordPress Radius Booking — Booking Calendar for Appointments & Services plugin <= 1.0.19 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Pedro "TheZakMan" Araujo in WordPress Plugin Radius Booking — Booking Calendar for Appointments & Services versions = 1.0.19...
CVE-2026-88397
ApiAdmin v.5.0 and before is vulnerable to SQL Injection in the user-list endpoint GET /admin/User/getUsers via the gid parameter...
CVE-2026-88395
GouGuOA v6.0.5 and before is vulnerable to SQL Injection in /home/message/rubbish via the keywords parameter...
CVE-2026-102428
Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Joomla CCK 8.3.16 - The order column for records was user provided and not properly validated, leading to a SQL injection vector...
WordPress ARMember Premium plugin <= 7.8 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Rafie Muhammad in WordPress Plugin ARMember Premium versions = 7.8...
WordPress UDesign Core plugin <= 4.15.0 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Rafie Muhammad in WordPress Plugin UDesign Core versions = 4.15.0...
WordPress ListingPro plugin <= 2.9.12 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Rafie Muhammad in WordPress Plugin ListingPro versions = 2.9.12...
WordPress Porto Theme - Functionality plugin <= 3.9.3 - SQL Injection vulnerability
WordPress Porto Theme - Functionality plugin = 3.9.3 - SQL Injection vulnerability discovered by Rafie Muhammad in WordPress Plugin Porto Theme - Functionality versions = 3.9.3...
CVE-2026-102428
The OrdaSoft Joomla CCK extension (versions
CVE-2026-102428 Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Joomla CCK < 8.3.16
Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Joomla CCK 8.3.16 - The order column for records was user provided and not properly validated, leading to a SQL injection vector...
EUVD-2026-92449
Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Joomla CCK 8.3.16 - The order column for records was user provided and not properly validated, leading to a SQL injection vector...
CVE-2026-102428 Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Joomla CCK < 8.3.16
Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Joomla CCK 8.3.16 - The order column for records was user provided and not properly validated, leading to a SQL injection vector...
WordPress Newsletter Subscription Form – User Subscriptions Form, Capture Email plugin <= 1.5.9 - SQL Injection vulnerability
SQL Injection vulnerability discovered by dzeusking in WordPress Plugin Newsletter Subscription Form – User Subscriptions Form, Capture Email versions = 1.5.9...
WordPress WP2LEADS plugin <= 3.5.7 - SQL Injection vulnerability
SQL Injection vulnerability discovered by johska in WordPress Plugin WP2LEADS versions = 3.5.7...
CKAN DataStore SQL Injection (CVE-2026-42031)
Exploits CVE-2026-42031 unauthenticated SQL injection in CKAN datastoresearchsql API via PostgreSQL tsrewrite primitives. !/usr/bin/env python3 -- coding: utf-8 -- """CKAN datastoresearchsql unauth SQLi CVE-2026-42031.""" import json import urllib.parse from kittysploit import from...
MOVEit Transfer SQL Injection RCE (CVE-2023-34362)
Exploits CVE-2023-34362 in Progress MOVEit Transfer: abuses moveitisapi.dll m2 header-smuggling to set guest session variables, then triggers UserGetUsersWithEmailAddress SQL injection via guestaccess.aspx to hijack an admin session or enable xpcmdshell for remote code execution. !/usr/bin/env...
wp2shell
CVE-2026-63030 + CVE-2026-60137 – „wp2shell“: Unauthenticatede RCE im WordPress-Core Batch-Routen-Verwirrung der REST-API CVE-2026-63030 verknüpft mit einer WPQuery-authornotin-SQL-Injection CVE-2026-60137 → Pre-Auth Remote Code Execution gegen eine Standard-WordPress-Installation. Entdeckt von...