CVE-2026-45440 WordPress WP Ultimate CSV Importer plugin <= 9.2 - SQL Injection vulnerability

Administrator SQL Injection in WP Ultimate CSV Importer = 9.2 versions...

CVE-2026-45440

The WP Ultimate CSV Importer plugin for WordPress, specifically versions

EUVD-2026-96456

Administrator SQL Injection in WP Ultimate CSV Importer = 9.2 versions...

CVE-2026-42722 WordPress Frontend Admin by DynamiApps plugin <= 3.29.13 - SQL Injection vulnerability

Administrator SQL Injection in Frontend Admin by DynamiApps = 3.29.13 versions...

EUVD-2026-96452

Administrator SQL Injection in Frontend Admin by DynamiApps = 3.29.13 versions...

CVE-2026-42722

The Frontend Admin by DynamiApps WordPress plugin, in versions

CVE-2026-42717 WordPress Leyka plugin <= 3.32.3 - SQL Injection vulnerability

Administrator SQL Injection in Leyka = 3.32.3 versions...

EUVD-2026-96449

Administrator SQL Injection in Leyka = 3.32.3 versions...

CVE-2026-42717

The WordPress Leyka plugin (versions

EUVD-2026-96446

Subscriber SQL Injection in Qode Tours = 3.1.3.2 versions...

CVE-2026-42712 WordPress Qode Tours plugin <= 3.1.3.2 - SQL Injection vulnerability

Subscriber SQL Injection in Qode Tours = 3.1.3.2 versions...

CVE-2026-42712

The Qode Tours WordPress plugin (versions

CVE-2026-42633

The WordPress Events Manager plugin (versions

CVE-2026-42633 WordPress Events Manager plugin <= 7.4.6 - SQL Injection vulnerability

Subscriber SQL Injection in Events Manager = 7.4.6 versions...

EUVD-2026-96435

Subscriber SQL Injection in Events Manager = 7.4.6 versions...

CVE-2026-40800

The ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes plugin for WordPress, versions

EUVD-2026-96537

Subscriber SQL Injection in ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes = 1.5.3 versions...

CVE-2026-40800 WordPress ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes plugin <= 1.5.3 - SQL Injection vulnerability

Subscriber SQL Injection in ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes = 1.5.3 versions...

CVE-2026-105889

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Tickera Tickera tickera-event-ticketing-system allows Blind SQL Injection.This issue affects Tickera: from n/a through 3.6.0.6...

CVE-2026-105889 WordPress Tickera plugin <= 3.6.0.6 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Tickera Tickera tickera-event-ticketing-system allows Blind SQL Injection.This issue affects Tickera: from n/a through 3.6.0.6...