CVE-2026-32557 WordPress WooCommerce Appointments plugin <= 5.3.2 - SQL Injection vulnerability

Unauthenticated SQL Injection in WooCommerce Appointments = 5.3.2 versions...

EUVD-2026-93229

Subscriber SQL Injection in WP2LEADS = 3.5.7 versions...

CVE-2026-25434 WordPress WP2LEADS plugin <= 3.5.7 - SQL Injection vulnerability

Subscriber SQL Injection in WP2LEADS = 3.5.7 versions...

CVE-2026-25434 WordPress WP2LEADS plugin <= 3.5.7 - SQL Injection vulnerability

Subscriber SQL Injection in WP2LEADS = 3.5.7 versions...

CVE-2026-25434

The WP2LEADS plugin for WordPress (versions

CVE-2026-4889 SQL Injection (SQLi) in eLoanApp Platform by RDL Technologies

SQL injection SQLi vulnerability in the eLoanApp application, specifically in the POST parameter 'logina' of the user process endpoint '/ajax/users.php?op=verify'. The parameter is vulnerable to boolean-based and time-based SQL injection. Successfully exploiting this vulnerability would allow an...

EUVD-2026-93227

SQL injection SQLi vulnerability in the eLoanApp application, specifically in the POST parameter 'logina' of the user process endpoint '/ajax/users.php?op=verify'. The parameter is vulnerable to boolean-based and time-based SQL injection. Successfully exploiting this vulnerability would allow an...

CVE-2026-4889

The eLoanApp platform by RDL Technologies contains a SQL injection (SQLi) vulnerability in the '/ajax/users.php?op=verify' endpoint. The vulnerability exists in the 'logina' POST parameter, which is susceptible to both boolean-based and time-based SQL injection. Successful exploitation enables an...

CVE-2026-4889 SQL Injection (SQLi) in eLoanApp Platform by RDL Technologies

SQL injection SQLi vulnerability in the eLoanApp application, specifically in the POST parameter 'logina' of the user process endpoint '/ajax/users.php?op=verify'. The parameter is vulnerable to boolean-based and time-based SQL injection. Successfully exploiting this vulnerability would allow an...

CVE-2026-105807

A vulnerability was found in SourceCodester Simple Student Information System 1.0. This affects an unknown part of the file searchquery.php. Performing a manipulation results in sql injection. The attack can be initiated remotely...

wp2shell-detect

wp2shell-detect 블랙박스형, 비간섭non-intrusive 탐지기 — WordPress 코어에서 2026-07-17에 공개된 사전 인증 RCE 체인인 wp2shell : CVE-2026-63030 — REST 배치 엔드포인트/wp-json/batch/v1의 라우트 혼동route confusion: 경로가 wpparseurl에 실패하는 하위 요청이 검증 배열에는 포함되지만 핸들러 배열에는 포함되지 않아 두 배열이 동기화되지 않습니다. CVE-2026-60137 — WPQuery의 authornotin 처리에서의 SQ...

EUVD-2026-93018

A vulnerability was found in SourceCodester Simple Student Information System 1.0. This affects an unknown part of the file searchquery.php. Performing a manipulation results in sql injection. The attack can be initiated remotely...

CVE-2026-105807 SourceCodester Simple Student Information System searchquery.php sql injection

A vulnerability was found in SourceCodester Simple Student Information System 1.0. This affects an unknown part of the file searchquery.php. Performing a manipulation results in sql injection. The attack can be initiated remotely...

CVE-2026-105807 SourceCodester Simple Student Information System searchquery.php sql injection

A vulnerability was found in SourceCodester Simple Student Information System 1.0. This affects an unknown part of the file searchquery.php. Performing a manipulation results in sql injection. The attack can be initiated remotely...

CVE-2026-105807

A SQL injection vulnerability exists in SourceCodester Simple Student Information System 1.0 . The flaw is located within an unspecified part of the searchquery.php file, where improper input handling allows for remote manipulation. An attacker can exploit this to execute arbitrary SQL commands. ...

CVE-2026-105776

A flaw has been found in bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL up to ae783195ba7e0390d3b3bfaddd99944b7e9735a4. Affected by this vulnerability is an unknown functionality of the file /admintransaction.php. This manipulation of the argument Username causes sql...

CVE-2026-11349

Modern Events Calendar Lite getresults로 실행하며 $wpdb-prepare는 사용하지 않습니다. 엔트리 포인트가 wpajaxnopriv에 등록되어 있으므로 인증, 계정, 논스 또는 사용자 상호작용이 필요하지 않습니다. 인증되지 않은 원...

CVE-2026-5076

CVE-2026-5076 - ARMember 비밀번호 재설정 취약점 취약점 정보 항목| 세부 정보 ---|--- CVE ID| CVE-2026-5076 플러그인| ARMember – Membership Plugin & Content Restriction 영향 받는 버전| Premium = 7.3.1 패치된 버전| 7.3.2 CVSS 점수| 9.8 심각 CWE| CWE-640: Weak Password Recovery 유형| 안전하지 않은 비밀번호 재설정 메커니즘 → 평문 키 저장 공격 벡터| 네트워크 / 원격 / 인증되지 않음...

wp2shell

wp2shell-check 비침습적 검사기: CVE-2026-63030 / CVE-2026-60137 "wp2shell", WordPress 코어의 사전 인증 RCE 체인 REST API 배치 라우트 혼동 → SQL 인젝션 → RCE. 영향을 받는 버전: WordPress 6.9.0–6.9.4, 7.0.0–7.0.1, 7.1 베타 전체 RCE 체인; 6.8.0–6.8.5 SQL 인젝션만, CVE-2026-60137. 수정된 버전: 6.8.6, 6.9.5, 7.0.2. 기능 원격으로 WordPress 버전을 식별...

CVE-2025-59213

Microsoft Configuration Manager ConfigMgr / SCCM 2503 인증되지 않은 SQL 인젝션 CVE-2025-59213 익스플로잇 이 스크립트는 CVE-2025-59213 취약점을 익스플로잇합니다. 이 취약점은 네트워크 접근이 가능한 인증되지 않은 공격자가 관리 지점Management Point에 접근하여, Discovery Data Manager DDM의 DuplicateAMTMachineRecord 메서드에서 SQL 인젝션 결함을 악용하여 사이트 데이터베이스에 임의의 SQL 쿼리를 실행할 수...