EUVD-2026-62380

Unauthenticated SQL Injection in NGG Smart Image Search 4.0.0 versions...

CVE-2026-73185 WordPress NGG Smart Image Search plugin < 4.0.0 - SQL Injection vulnerability

Unauthenticated SQL Injection in NGG Smart Image Search 4.0.0 versions...

CVE-2026-73185

The WordPress NGG Smart Image Search plugin (versions

EUVD-2026-62378

Unauthenticated SQL Injection in Maps Marker Pro = 4.32 versions...

CVE-2026-73183 WordPress Maps Marker Pro plugin <= 4.32 - SQL Injection vulnerability

Unauthenticated SQL Injection in Maps Marker Pro = 4.32 versions...

CVE-2026-73183

Maps Marker Pro (WordPress plugin) versions ≤ 4.32 contain an unauthenticated SQL injection vulnerability, allowing remote attackers with no credentials to read sensitive data and potentially affect availability. CVSS 3.1 scores it 9.3 Critical (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L). Patchstack ha...

EUVD-2026-62376

Subscriber SQL Injection in Community by PeepSo = 9.0.5.2 versions...

CVE-2026-66668

CVE-2026-66668 is a Subscriber SQL Injection vulnerability in the Community by PeepSo WordPress plugin, affecting versions ≤ 9.0.5.2 . The vulnerability was discovered by Yukusawa18 and reported via Patchstack. The CVSS 3.1 base score is 8.5 (HIGH) , with a network attack vector, low complexity, ...

CVE-2026-66668 WordPress Community by PeepSo plugin <= 9.0.5.2 - SQL Injection vulnerability

Subscriber SQL Injection in Community by PeepSo = 9.0.5.2 versions...

CVE-2026-32552

A SQL Injection vulnerability exists in the YITH WooCommerce Membership Premium WordPress plugin, affecting versions 2.33.0 and earlier . The flaw is in the Subscriber functionality and was discovered by dutafi . The CVSS 3.1 score is 8.5 (HIGH) , with a network attack vector, low complexity, and...

EUVD-2026-62372

Subscriber SQL Injection in YITH WooCommerce Membership Premium = 2.33.0 versions...

CVE-2026-32552 WordPress YITH WooCommerce Membership Premium plugin <= 2.33.0 - SQL Injection vulnerability

Subscriber SQL Injection in YITH WooCommerce Membership Premium = 2.33.0 versions...

WordPress WordPress Persistent Login plugin <= 3.1.0 - SQL Injection vulnerability

SQL Injection vulnerability discovered by dutafi in WordPress Plugin WordPress Persistent Login versions = 3.1.0...

AOSP-DownloadProviderDbDumperSQLiWhere

AOSP-DownloadProviderDbDumperSQLiWhere PoC che sfrutta l'SQL Injection nel Provider di Download di Android nel parametro Selection CVE-2019-2198 Advisory di Sicurezza SQL Injection nel Provider di Download di Android AOSP nel parametro Query Selection CVE-2019-2198 Dimostrazione...

AOSP-DownloadProviderDbDumperSQLiLimit

AOSP-DownloadProviderDbDumperSQLiLimit PoC explorando Injeção SQL no Provedor de Download do Android no Parâmetro de Ordenação CVE-2019-2196 Aviso de Segurança Android AOSP Injeção SQL no Provedor de Download no Parâmetro de Ordenação da Consulta CVE-2019-2196 Demo...

-exploit-lab

-exploit-lab Exploits Python cve-2019-0708 – von HackHeart 🧠 Code-Review & Portierung - Python 2 → Python 3 Dieser Exploit wurde ursprünglich in Python 2 geschrieben, das von modernen Systemen nicht mehr unterstützt wird. Um Kompatibilität zu gewährleisten und zukunftssichere Werkzeuge zu erhalte...

CVE-2023-27742

CVE-2023-27742 Foi descoberto que o IDURAR ERP/CRM v1 contém uma vulnerabilidade de injeção de SQL através do componente /api/login. Descrição Foi descoberto que o IDURAR ERP/CRM v1 contém uma vulnerabilidade de injeção de SQL através do componente /api/login. Tipo de Vulnerabilidade Injeção de S...

BIT-POSTGRESQL-2026-15741 PostgreSQL expression deparse allows SQL injection via EXTRACT argument

SQL injection in PostgreSQL EXTRACT deparse allows an object owner to execute arbitrary SQL as a superuser via a hostile object definition. Attacks affect expression deparse consumers broadly, including pgdump, psql commands like \sf, and any similar usage in non-core tools. Versions before...

WordPress Total Donations plugin <= 2.0.5 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Plugin Total Donations versions = 2.0.5...

CVE-2024-40498

CVE-2024-40498 Aplicação Afetada online-shopping-system-advanced 1.0 https://github.com/PuneethReddyHC/online-shopping-system-advanced Descrição O arquivo register.php lida com o registro de usuários. Na linha 117, os parâmetros POST "$address1" e "$address2" não são sanitizados, ao contrário do...