CVE-2024-40570

SQL Injection vulnerability in SeaCMS v.12.9 allows a remote attacker to obtain sensitive information via the admindatarelate.php component...

CVE-2025-49452

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Adrian Ladó PostaPanduri postapanduri allows SQL Injection.This issue affects PostaPanduri: from n/a through = 2.1.3...

CVE-2025-48118

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WpExperts Hub Woocommerce Partial Shipment wc-partial-shipment allows SQL Injection.This issue affects Woocommerce Partial Shipment: from n/a through = 3.2...

CVE-2025-39486

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ValvePress Rankie valvepress-rankie allows SQL Injection.This issue affects Rankie: from n/a through 1.8.2...

CVE-2025-39479

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in smartiolabs Smart Notification allows Blind SQL Injection. This issue affects Smart Notification: from n/a through 10.3...

CVE-2025-30562

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in wpdistillery Navigation Tree Elementor navigation-tree-elementor allows Blind SQL Injection.This issue affects Navigation Tree Elementor: from n/a through = 1.0.1...

CVE-2025-28972

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Suhas Surse WP Employee Attendance System wp-employee-attendance-system allows Blind SQL Injection.This issue affects WP Employee Attendance System: from n/a through = 3.5...

CVE-2025-49452 WordPress PostaPanduri <= 2.1.3 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Adrian Ladó PostaPanduri allows SQL Injection. This issue affects PostaPanduri: from n/a through 2.1.3...

CVE-2025-49452

CVE-2025-49452 affects the WordPress plugin PostaPanduri up to version 2.1.3 and is rooted in improper neutralization of special elements in SQL commands (SQL Injection). The vulnerability is exploitable over the network with no user interaction and could lead to high confidentiality impact and l...

CVE-2025-28972

CVE-2025-28972 is an SQL injection vulnerability in the WordPress plugin “WP Employee Attendance System” affecting version 3.5 and earlier. The described root cause is improper neutralization of special elements in SQL commands, enabling blind SQL injection. Public references indicate the issue i...

CVE-2025-30562 WordPress Navigation Tree Elementor plugin <= 1.0.1 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in wpdistillery Navigation Tree Elementor navigation-tree-elementor allows Blind SQL Injection.This issue affects Navigation Tree Elementor: from n/a through = 1.0.1...

CVE-2025-39479 WordPress Smart Notification Plugin <= 10.3 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in smartiolabs Smart Notification allows Blind SQL Injection. This issue affects Smart Notification: from n/a through 10.3...

CVE-2025-39479 WordPress Smart Notification Plugin <= 10.3 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in smartiolabs Smart Notification allows Blind SQL Injection. This issue affects Smart Notification: from n/a through 10.3...

CVE-2025-47573 WordPress School Management System Plugin <= 92.0.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in mojoomla School Management allows Blind SQL Injection. This issue affects School Management: from n/a through 92.0.0...

CVE-2025-47573

CVE-2025-47573 is an SQL Injection vulnerability in the mojoomla WordPress School Management plugin (affected versions n/a–92.0.0) due to improper neutralization of special elements in SQL commands, enabling Blind SQL Injection. Public sources in the provided documents identify the issue but do n...

CVE-2025-47573 WordPress School Management System Plugin <= 92.0.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in mojoomla School Management allows Blind SQL Injection. This issue affects School Management: from n/a through 92.0.0...

CVE-2025-49854 WordPress Slim SEO plugin <= 4.5.4 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Anh Tran Slim SEO allows SQL Injection. This issue affects Slim SEO: from n/a through 4.5.4...

CVE-2025-49854 WordPress Slim SEO plugin <= 4.5.4 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Anh Tran Slim SEO slim-seo allows SQL Injection.This issue affects Slim SEO: from n/a through = 4.5.4...

CVE-2025-49854

CVE-2025-49854 describes an SQL Injection in WordPress Slim SEO (versions n/a through 4.5.4) due to improper neutralization of input in SQL commands. Public sources (NVD, CVE List, Patchstack entry) confirm the vulnerability exists in Slim SEO and has a patch/update path: upgrading to a version l...

CVE-2025-6160

CVE-2025-6160 affects SourceCodester Client Database Management System 1.0. Affects the file /user_customer_create_order.php where manipulation of the user_id parameter enables a SQL injection. The issue can be exploited remotely and, per sources, the exploit has been disclosed publicly. Public m...