CVE-2026-28156 WordPress Do Lasso plugin <= 358 - SQL Injection vulnerability

Subscriber SQL Injection in Do Lasso = 358 versions...

EUVD-2026-57949

Subscriber SQL Injection in Do Lasso = 358 versions...

CVE-2026-28156

Subscriber SQL Injection in Do Lasso = 358 versions...

CVE-2026-28156

CVE-2026-28156 pertains to the WordPress Do Lasso plugin

EUVD-2026-57945

Unauthenticated SQL Injection in Web Directory Free = 1.7.13 versions...

CVE-2026-28142

Unauthenticated SQL Injection in Web Directory Free = 1.7.13 versions...

CVE-2026-28142

The CVE describes an Unauthenticated SQL Injection in the WordPress plugin Web Directory Free for versions up to 1.7.13 . Root cause details are not explicitly provided in the documents beyond the vulnerability type, but the CVSS v3.1 base score is 9.3 (CRITICAL) with high impact on confidentiali...

CVE-2026-28142 WordPress Web Directory Free plugin <= 1.7.13 - SQL Injection vulnerability

Unauthenticated SQL Injection in Web Directory Free = 1.7.13 versions...

CVE-2026-28001

Unauthenticated SQL Injection in WP Directory Kit = 1.5.4 versions...

CVE-2026-28001

The CVE-2026-28001 entry concerns the WP Directory Kit WordPress plugin, affected versions

EUVD-2026-57941

Unauthenticated SQL Injection in WP Directory Kit = 1.5.4 versions...

CVE-2026-28001 WordPress WP Directory Kit plugin <= 1.5.4 - SQL Injection vulnerability

Unauthenticated SQL Injection in WP Directory Kit = 1.5.4 versions...

EUVD-2026-57936

Unauthenticated SQL Injection in WP Directory Kit = 1.5.4 versions...

CVE-2026-27538 WordPress WP Directory Kit plugin <= 1.5.4 - SQL Injection vulnerability

Unauthenticated SQL Injection in WP Directory Kit = 1.5.4 versions...

CVE-2026-27538

CVE-2026-27538 affects the WordPress WP Directory Kit plugin up to version 1.5.4, with an unauthenticated SQL injection vulnerability. The underlying root cause, affected files/components, and exact exploitation flow are not detailed in the provided documents. CVSS 3.1 base score is 7.5 (HIGH) wi...

CVE-2026-15742

Integer wraparound in PostgreSQL fuzzystrmatch allows a user to direct writes to a huge range of addresses, executing arbitrary code as the operating system user running the database, via extreme inputs to SQL function levenshtein or levenshteinlessequal. Versions before PostgreSQL 18.6, 17.11,...

CVE-2026-15741

SQL injection in PostgreSQL EXTRACT deparse allows an object owner to execute arbitrary SQL as a superuser via a hostile object definition. Attacks affect expression deparse consumers broadly, including pgdump, psql commands like \sf, and any similar usage in non-core tools. Versions before...

ALPINE-CVE-2026-15741

SQL injection in PostgreSQL EXTRACT deparse allows an object owner to execute arbitrary SQL as a superuser via a hostile object definition. Attacks affect expression deparse consumers broadly, including pgdump, psql commands like \sf, and any similar usage in non-core tools. Versions before...

AZL-95684 CVE-2026-15741 affecting package postgresql 16.14-1

SQL injection in PostgreSQL EXTRACT deparse allows an object owner to execute arbitrary SQL as a superuser via a hostile object definition. Attacks affect expression deparse consumers broadly, including pgdump, psql commands like \sf, and any similar usage in non-core tools. Versions before...

CVE-2026-15741

SQL injection in PostgreSQL EXTRACT deparse allows an object owner to execute arbitrary SQL as a superuser via a hostile object definition. Attacks affect expression deparse consumers broadly, including pgdump, psql commands like \sf, and any similar usage in non-core tools. Versions before...