262386 matches found
SQL Injection
Overview sulu/sulu is a highly extensible open-source PHP content management system based on the Symfony framework. Affected versions of this package are vulnerable to SQL Injection via the categories query parameter in the Smart Content category filter. An attacker can infer the existence of, an...
CVE-2026-92692
The Sulu PHP content management system (affected versions 2.6 and 3.0 prior to 2.6.25 and 3.0.8 ) is vulnerable to an unauthenticated JCR-SQL2 injection . The flaw exists in the Smart Content QueryBuilder at src/Sulu/Component/Content/SmartContent/QueryBuilder.php because category identifiers fro...
CVE-2026-95601
The Product Filter by WBW WordPress plugin (versions
EUVD-2026-85504
Unauthenticated SQL Injection in Product Filter by WBW = 3.1.7 versions...
CVE-2026-95601 WordPress Product Filter by WBW plugin <= 3.1.7 - SQL Injection vulnerability
Unauthenticated SQL Injection in Product Filter by WBW = 3.1.7 versions...
CVE-2026-95601 WordPress Product Filter by WBW plugin <= 3.1.7 - SQL Injection vulnerability
Unauthenticated SQL Injection in Product Filter by WBW = 3.1.7 versions...
CVE-2026-95593 WordPress Ultimeter plugin <= 3.0.8 - SQL Injection vulnerability
Editor SQL Injection in Ultimeter = 3.0.8 versions...
CVE-2026-95593
The Ultimeter WordPress plugin versions
CVE-2026-95593 WordPress Ultimeter plugin <= 3.0.8 - SQL Injection vulnerability
Editor SQL Injection in Ultimeter = 3.0.8 versions...
EUVD-2026-85502
Editor SQL Injection in Ultimeter = 3.0.8 versions...
CVE-2026-95590 WordPress Tainacan plugin <= 1.2.0 - SQL Injection vulnerability
Subscriber SQL Injection in Tainacan = 1.2.0 versions...
CVE-2026-95590
The Tainacan WordPress plugin (versions
EUVD-2026-85500
Subscriber SQL Injection in Tainacan = 1.2.0 versions...
CVE-2026-95590 WordPress Tainacan plugin <= 1.2.0 - SQL Injection vulnerability
Subscriber SQL Injection in Tainacan = 1.2.0 versions...
CVE-2026-95522 WordPress Easy Digital Downloads plugin <= 3.7.0 - SQL Injection vulnerability
Shop manager SQL Injection in Easy Digital Downloads = 3.7.0 versions...
CVE-2026-95522 WordPress Easy Digital Downloads plugin <= 3.7.0 - SQL Injection vulnerability
Shop manager SQL Injection in Easy Digital Downloads = 3.7.0 versions...
CVE-2026-95522
The Easy Digital Downloads WordPress plugin (versions
EUVD-2026-85491
Shop manager SQL Injection in Easy Digital Downloads = 3.7.0 versions...