CVE-2026-73185

Unauthenticated SQL Injection in NGG Smart Image Search 4.0.0 versions...

CVE-2026-66668

Subscriber SQL Injection in Community by PeepSo = 9.0.5.2 versions...

CVE-2026-32552

Subscriber SQL Injection in YITH WooCommerce Membership Premium = 2.33.0 versions...

EUVD-2026-62392

Unauthenticated SQL Injection in Total Donations = 2.0.5 versions...

CVE-2026-73391 WordPress Total Donations plugin <= 2.0.5 - SQL Injection vulnerability

Unauthenticated SQL Injection in Total Donations = 2.0.5 versions...

CVE-2026-73391

The WordPress Total Donations plugin (≤2.0.5) has an unauthenticated SQL Injection vulnerability rated CVSS 9.3 Critical. Patchstack reported it; no patch version or in-the-wild exploitation details are provided in the documents.

CVE-2026-73388 WordPress Nikstore Core plugin <= 1.5 - SQL Injection vulnerability

Unauthenticated SQL Injection in Nikstore Core = 1.5 versions...

EUVD-2026-62389

Unauthenticated SQL Injection in Nikstore Core = 1.5 versions...

CVE-2026-73388

Nikstore Core is a WordPress plugin affected by an unauthenticated SQL injection vulnerability in versions ≤ 1.5 . The flaw allows a remote, unauthenticated attacker to inject SQL queries over the network with low complexity, resulting in high confidentiality impact and low availability impact (C...

CVE-2026-73185 WordPress NGG Smart Image Search plugin < 4.0.0 - SQL Injection vulnerability

Unauthenticated SQL Injection in NGG Smart Image Search 4.0.0 versions...

CVE-2026-73185

The WordPress NGG Smart Image Search plugin (versions

EUVD-2026-62380

Unauthenticated SQL Injection in NGG Smart Image Search 4.0.0 versions...

EUVD-2026-62378

Unauthenticated SQL Injection in Maps Marker Pro = 4.32 versions...

CVE-2026-73183 WordPress Maps Marker Pro plugin <= 4.32 - SQL Injection vulnerability

Unauthenticated SQL Injection in Maps Marker Pro = 4.32 versions...

CVE-2026-73183

Maps Marker Pro (WordPress plugin) versions ≤ 4.32 contain an unauthenticated SQL injection vulnerability, allowing remote attackers with no credentials to read sensitive data and potentially affect availability. CVSS 3.1 scores it 9.3 Critical (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L). Patchstack ha...

EUVD-2026-62376

Subscriber SQL Injection in Community by PeepSo = 9.0.5.2 versions...

CVE-2026-66668

CVE-2026-66668 is a Subscriber SQL Injection vulnerability in the Community by PeepSo WordPress plugin, affecting versions ≤ 9.0.5.2 . The vulnerability was discovered by Yukusawa18 and reported via Patchstack. The CVSS 3.1 base score is 8.5 (HIGH) , with a network attack vector, low complexity, ...

CVE-2026-66668 WordPress Community by PeepSo plugin <= 9.0.5.2 - SQL Injection vulnerability

Subscriber SQL Injection in Community by PeepSo = 9.0.5.2 versions...

EUVD-2026-62372

Subscriber SQL Injection in YITH WooCommerce Membership Premium = 2.33.0 versions...

CVE-2026-32552

A SQL Injection vulnerability exists in the YITH WooCommerce Membership Premium WordPress plugin, affecting versions 2.33.0 and earlier . The flaw is in the Subscriber functionality and was discovered by dutafi . The CVSS 3.1 score is 8.5 (HIGH) , with a network attack vector, low complexity, and...