EUVD-2026-93230

Unauthenticated SQL Injection in WooCommerce Appointments = 5.3.2 versions...

CVE-2026-32557

The WooCommerce Appointments plugin for WordPress versions

CVE-2026-32557 WordPress WooCommerce Appointments plugin <= 5.3.2 - SQL Injection vulnerability

Unauthenticated SQL Injection in WooCommerce Appointments = 5.3.2 versions...

CVE-2026-25434

The WP2LEADS plugin for WordPress (versions

EUVD-2026-93229

Subscriber SQL Injection in WP2LEADS = 3.5.7 versions...

CVE-2026-25434 WordPress WP2LEADS plugin <= 3.5.7 - SQL Injection vulnerability

Subscriber SQL Injection in WP2LEADS = 3.5.7 versions...

CVE-2026-25434 WordPress WP2LEADS plugin <= 3.5.7 - SQL Injection vulnerability

Subscriber SQL Injection in WP2LEADS = 3.5.7 versions...

CVE-2026-4889 SQL Injection (SQLi) in eLoanApp Platform by RDL Technologies

SQL injection SQLi vulnerability in the eLoanApp application, specifically in the POST parameter 'logina' of the user process endpoint '/ajax/users.php?op=verify'. The parameter is vulnerable to boolean-based and time-based SQL injection. Successfully exploiting this vulnerability would allow an...

EUVD-2026-93227

SQL injection SQLi vulnerability in the eLoanApp application, specifically in the POST parameter 'logina' of the user process endpoint '/ajax/users.php?op=verify'. The parameter is vulnerable to boolean-based and time-based SQL injection. Successfully exploiting this vulnerability would allow an...

CVE-2026-4889

The eLoanApp platform by RDL Technologies contains a SQL injection (SQLi) vulnerability in the '/ajax/users.php?op=verify' endpoint. The vulnerability exists in the 'logina' POST parameter, which is susceptible to both boolean-based and time-based SQL injection. Successful exploitation enables an...

CVE-2026-4889 SQL Injection (SQLi) in eLoanApp Platform by RDL Technologies

SQL injection SQLi vulnerability in the eLoanApp application, specifically in the POST parameter 'logina' of the user process endpoint '/ajax/users.php?op=verify'. The parameter is vulnerable to boolean-based and time-based SQL injection. Successfully exploiting this vulnerability would allow an...

CVE-2026-105807

A vulnerability was found in SourceCodester Simple Student Information System 1.0. This affects an unknown part of the file searchquery.php. Performing a manipulation results in sql injection. The attack can be initiated remotely...

wp2shell-detect

wp2shell-detect Détecteur blackbox, non intrusif pour wp2shell — la chaîne RCE sans authentification préalable dans le noyau WordPress divulguée le 2026-07-17 : CVE-2026-63030 — confusion de route dans le point de terminaison batch REST /wp-json/batch/v1 : une sous-requête dont le chemin échoue...

EUVD-2026-93018

A vulnerability was found in SourceCodester Simple Student Information System 1.0. This affects an unknown part of the file searchquery.php. Performing a manipulation results in sql injection. The attack can be initiated remotely...

CVE-2026-105807 SourceCodester Simple Student Information System searchquery.php sql injection

A vulnerability was found in SourceCodester Simple Student Information System 1.0. This affects an unknown part of the file searchquery.php. Performing a manipulation results in sql injection. The attack can be initiated remotely...

CVE-2026-105807 SourceCodester Simple Student Information System searchquery.php sql injection

A vulnerability was found in SourceCodester Simple Student Information System 1.0. This affects an unknown part of the file searchquery.php. Performing a manipulation results in sql injection. The attack can be initiated remotely...

CVE-2026-105807

A SQL injection vulnerability exists in SourceCodester Simple Student Information System 1.0 . The flaw is located within an unspecified part of the searchquery.php file, where improper input handling allows for remote manipulation. An attacker can exploit this to execute arbitrary SQL commands. ...

CVE-2026-105776

A flaw has been found in bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL up to ae783195ba7e0390d3b3bfaddd99944b7e9735a4. Affected by this vulnerability is an unknown functionality of the file /admintransaction.php. This manipulation of the argument Username causes sql...

CVE-2026-11349

Modern Events Calendar Lite = 7.33.0 — meclistloadmore attsinclude / attsexclude के माध्यम से अनधिकृत SQL इंजेक्शन सारांश विवरण| मान ---|--- प्लगइन| Modern Events Calendar Lite स्लग| modern-events-calendar-lite लेखक| Webnus प्रभावित| = 7.33.0 वर्तमान विक्रेता-वितरित Lite रिलीज़। बग संपूर्ण w.org...

CVE-2026-5076

CVE-2026-5076 - ARMember पासवर्ड रीसेट भेद्यता भेद्यता की जानकारी आइटम| विवरण ---|--- CVE आईडी| CVE-2026-5076 प्लगिन| ARMember – सदस्यता प्लगिन और सामग्री प्रतिबंध प्रभावित संस्करण| Premium = 7.3.1 पैच किया गया संस्करण| 7.3.2 CVSS स्कोर| 9.8 क्रिटिकल CWE| CWE-640: कमजोर पासवर्ड रिकवरी प्रकार|...