Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

238036 matches found

CVE
CVE•added 2026/06/15 8:18 p.m.•20 views

CVE-2026-42639

CVE-2026-42639 concerns the WordPress plugin GD Rating System (versions

9.3CVSS5.7AI score0.00283EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2026/06/15 8:18 p.m.•38 views

CVE-2026-42639 WordPress GD Rating System plugin <= 3.6.2 - SQL Injection vulnerability

Unauthenticated SQL Injection in GD Rating System = 3.6.2 versions...

9.3CVSS0.00283EPSS
SaveExploits0References1
EUVD
EUVD•added 2026/06/15 8:18 p.m.•15 views

EUVD-2026-36815

Unauthenticated SQL Injection in GD Rating System = 3.6.2 versions...

9.3CVSS5.7AI score0.00283EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2026/06/15 8:18 p.m.•46 views

CVE-2026-42386 WordPress Order Delivery Date for WooCommerce plugin <= 4.5.1 - SQL Injection vulnerability

Unauthenticated SQL Injection in Order Delivery Date for WooCommerce = 4.5.1 versions...

9.3CVSS0.00283EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment•added 2026/06/15 8:18 p.m.•7 views

CVE-2026-42386 WordPress Order Delivery Date for WooCommerce plugin <= 4.5.1 - SQL Injection vulnerability

Unauthenticated SQL Injection in Order Delivery Date for WooCommerce = 4.5.1 versions...

9.3CVSS5.7AI score0.00283EPSS
SaveExploits0References1
EUVD
EUVD•added 2026/06/15 8:18 p.m.•20 views

EUVD-2026-36813

Unauthenticated SQL Injection in Order Delivery Date for WooCommerce = 4.5.1 versions...

9.3CVSS5.7AI score0.00283EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2026/06/15 8:18 p.m.•31 views

CVE-2026-42381 WordPress Funnel Builder by FunnelKit plugin <= 3.15.0.1 - SQL Injection vulnerability

Unauthenticated SQL Injection in Funnel Builder by FunnelKit = 3.15.0.1 versions...

9.3CVSS0.00283EPSS
SaveExploits0References1
EUVD
EUVD•added 2026/06/15 8:18 p.m.•13 views

EUVD-2026-36807

Unauthenticated SQL Injection in wpForo Forum = 3.0.4 versions...

9.3CVSS5.7AI score0.00283EPSS
SaveExploits0References1
CVE
CVE•added 2026/06/15 8:18 p.m.•30 views

CVE-2026-40798

WPForo Forum plugin for WordPress &lt;= 3.0.4 is affected by an unauthenticated SQL injection vulnerability. The CVE entry cites unauthenticated SQL Injection in wpForo Forum &lt;= 3.0.4, with CVSSv3.1 base score 9.3 (CRITICAL) and impact TIC: Confidentiality High, Availability Low, no privileges...

9.3CVSS5.7AI score0.00283EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2026/06/15 8:18 p.m.•34 views

CVE-2026-40771 WordPress Contest Gallery plugin <= 28.1.6 - SQL Injection vulnerability

Unauthenticated SQL Injection in Contest Gallery = 28.1.6 versions...

9.3CVSS0.00283EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2026/06/15 8:18 p.m.•34 views

CVE-2026-40766 WordPress MasterStudy LMS plugin <= 3.7.25 - SQL Injection vulnerability

Subscriber SQL Injection in MasterStudy LMS = 3.7.25 versions...

8.5CVSS0.00332EPSS
SaveExploits0References1
CVE
CVE•added 2026/06/15 8:18 p.m.•23 views

CVE-2026-40766

CVE-2026-40766 concerns the WordPress MasterStudy LMS plugin (versions

8.5CVSS5.7AI score0.00332EPSS
SaveExploits0References1
CVE
CVE•added 2026/06/15 8:18 p.m.•37 views

CVE-2026-40762

The WPGraphQL WordPress plugin is affected by an unauthenticated SQL Injection in versions earlier than 2.11.1. The issue originates in WPGraphQL

7.5CVSS5.7AI score0.00251EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2026/06/15 8:18 p.m.•53 views

CVE-2026-40762 WordPress WPGraphQL plugin < 2.11.1 - SQL Injection vulnerability

Unauthenticated SQL Injection in WPGraphQL 2.11.1 versions...

7.5CVSS0.00251EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2026/06/15 8:18 p.m.•37 views

CVE-2026-39530 WordPress SpeakOut! Email Petitions plugin <= 4.6.5 - SQL Injection vulnerability

Unauthenticated SQL Injection in SpeakOut! Email Petitions = 4.6.5 versions...

9.3CVSS0.00296EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2026/06/15 8:18 p.m.•32 views

CVE-2026-39519 WordPress GeekyBot plugin <= 1.2.0 - SQL Injection vulnerability

Unauthenticated SQL Injection in GeekyBot = 1.2.0 versions...

9.3CVSS0.00283EPSS
SaveExploits0References1
CVE
CVE•added 2026/06/15 8:17 p.m.•24 views

CVE-2026-39512

WordPress GeoDirectory plugin ≤ 2.8.152 contains an Unauthenticated SQL Injection vulnerability. Affects that plugin version, enabling network-based attacks with no authentication; CVSSv3.1 base score 9.3 (CRITICAL) with high confidentiality impact and low availability impact. Connected sources p...

9.3CVSS5.7AI score0.00283EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2026/06/15 8:17 p.m.•32 views

CVE-2026-39511 WordPress WP Photo Album Plus plugin <= 9.1.08.001 - SQL Injection vulnerability

Unauthenticated SQL Injection in WP Photo Album Plus = 9.1.08.001 versions...

9.3CVSS0.00295EPSS
SaveExploits0References1
CVE
CVE•added 2026/06/15 8:17 p.m.•32 views

CVE-2026-39511

CVE-2026-39511 affects the WordPress plugin WP Photo Album Plus

9.3CVSS5.7AI score0.00295EPSS
SaveExploits0References1
CVE
CVE•added 2026/06/15 8:17 p.m.•36 views

CVE-2026-39502

This CVE concerns the WordPress plugin Form Maker by 10Web (versions &lt;= 1.15.38). The issue is described as an Unauthenticated SQL Injection vulnerability in Form Maker by 10Web

9.3CVSS5.7AI score0.00292EPSS
SaveExploits0References1
Rows per page
Query Builder