PT-2026-106453

Unauthenticated SQL Injection in Gmedia Photo Gallery = 1.25.1 versions...

PT-2026-106476

Unauthenticated SQL Injection in ARMember Premium = 7.8 versions...

PT-2026-106475

Subscriber SQL Injection in UDesign Core = 4.15.0 versions...

PT-2026-106485

SQL injection SQLi vulnerability in the eLoanApp application, specifically in the POST parameter 'logina' of the user process endpoint '/ajax/users.php?op=verify'. The parameter is vulnerable to boolean-based and time-based SQL injection. Successfully exploiting this vulnerability would allow an...

PT-2026-106467

Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email = 1.5.9 versions...

PT-2026-106474

Unauthenticated SQL Injection in Porto Theme - Functionality = 3.9.3 versions...

PT-2026-106473

Subscriber SQL Injection in ListingPro = 2.9.12 versions...

PT-2026-106461

Unauthenticated SQL Injection in SendPress Newsletters = 1.26.1.20 versions...

PT-2026-106443

Subscriber SQL Injection in Buddyboss Platform = 3.1.0 versions...

PT-2026-106335

A flaw has been found in bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL up to ae783195ba7e0390d3b3bfaddd99944b7e9735a4. Affected by this vulnerability is an unknown functionality of the file /admin transaction.php. This manipulation of the argument Username causes sql...

PT-2026-106363

A vulnerability was found in SourceCodester Simple Student Information System 1.0. This affects an unknown part of the file searchquery.php. Performing a manipulation results in sql injection. The attack can be initiated remotely...

PT-2026-106436

Unauthenticated SQL Injection in Radius Booking — Booking Calendar for Appointments & Services = 1.0.19 versions...

PT-2026-106389

Subscriber SQL Injection in Paid Member Subscriptions = 3.1.1 versions...

PT-2026-106421

Subscriber SQL Injection in Woffice = 5.4.35 versions...

PT-2026-106420

Unauthenticated SQL Injection in Booknetic = 4.8.5 versions...

PT-2026-106407

Name of the Vulnerable Software and Affected Versions Mooberry Book Manager version 4.16.2 Description An SQL Injection issue exists in the subscriber component, allowing an attacker to interfere with the application's database queries. Recommendations At the moment, there is no information about...

PT-2026-106406

Name of the Vulnerable Software and Affected Versions WooCommerce Lottery versions prior to 2.3.0 Description An unauthenticated SQL Injection exists in the software. SQL Injection is a type of vulnerability that allows an attacker to interfere with the queries that an application makes to its...

PT-2026-106395

Name of the Vulnerable Software and Affected Versions WooCommerce Appointments versions prior to 5.3.3 Description An unauthenticated SQL Injection exists in the software. SQL Injection is a type of vulnerability that allows an attacker to interfere with the queries that an application makes to i...

PT-2026-106394

Subscriber SQL Injection in WP2LEADS = 3.5.7 versions...

PT-2026-107194

Name of the Vulnerable Software and Affected Versions ClearPass Policy Manager affected versions not specified Description A SQL injection flaw exists in the web-based management interface of ClearPass Policy Manager. This issue allows an authenticated remote attacker to execute arbitrary databas...