283742 matches found
CVE-2026-76570
The JCTables Joomla extension (version
CVE-2026-76570 Joomla Extension - joomcode.com - Unauthenticated SQL injection in read and write queries in JCTables < 1.21.1
Joomla Extension - joomcode.com - Unauthenticated SQL injection in read and write queries in JCTables 1.21.1 - The front-end CRUD API controller performs no Joomla token validation and no authentication check on any task. Table names, column names, and values are taken directly from request...
CVE-2026-82307
Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Dolusoft Software Technologies SOPLOG allows SQL Injection. This issue affects SOPLOG: before Soplog 2026.9.4.1...
CVE-2026-18782
The Trex MES software by Trex Digital Smart Manufacturing Systems Inc. contains an SQL injection vulnerability due to the improper neutralization of special elements in SQL commands. This flaw is severe enough to allow Command Line Execution via the SQL injection vector. The vulnerability affects...
EUVD-2026-89963
Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Trex Digital Smart Manufacturing Systems Inc. Trex MES allows Command Line Execution through SQL Injection. This issue affects Trex MES: through 2026-09-29...
CVE-2026-18782 SQL Injection in Trex Digital Manufacturing's Trex MES
Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Trex Digital Smart Manufacturing Systems Inc. Trex MES allows Command Line Execution through SQL Injection. This issue affects Trex MES: through 2026-09-29...
CVE-2026-62097 WordPress Business Directory plugin <= 6.4.27 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPTasty Business Directory business-directory-plugin allows Blind SQL Injection.This issue affects Business Directory: from n/a through 6.4.27...
CVE-2026-62097
The WPTasty Business Directory plugin for WordPress (versions n/a through 6.4.27 ) is vulnerable to Blind SQL Injection due to the Improper Neutralization of Special Elements used in an SQL Command . This flaw allows an attacker with high privileges to execute malicious SQL queries. No specific e...
EUVD-2026-89957
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPTasty Business Directory business-directory-plugin allows Blind SQL Injection.This issue affects Business Directory: from n/a through 6.4.27...
CVE-2026-82307
Dolusoft Software Technologies SOPLOG is vulnerable to an SQL injection due to the improper neutralization of special elements used in SQL commands. This vulnerability affects versions before Soplog 2026.9.4.1 . The flaw allows an attacker to execute unauthorized SQL commands, potentially leading...
CVE-2026-82307 Multiple Vulnerabilities in Dolusoft Software's SOPLOG
Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Dolusoft Software Technologies SOPLOG allows SQL Injection. This issue affects SOPLOG: before Soplog 2026.9.4.1...
EUVD-2026-89953
Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Dolusoft Software Technologies SOPLOG allows SQL Injection. This issue affects SOPLOG: before Soplog 2026.9.4.1...
CVE-2026-82307 Multiple Vulnerabilities in Dolusoft Software's SOPLOG
Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Dolusoft Software Technologies SOPLOG allows SQL Injection. This issue affects SOPLOG: before Soplog 2026.9.4.1...
CVE-2026-97293
Contributor SQL Injection in Media LIbrary Assistant = 3.41 versions...
CVE-2026-97287
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Blind SQL Injection. This issue affects Event Tickets: from n/a through 5.29.5...
CVE-2026-96827
Administrator SQL Injection in Admin Notices Manager = 1.6.0 versions...
CVE-2026-96828
Administrator SQL Injection in Category Discount Woocommerce = 5.18 versions...
CVE-2026-96822
Unauthenticated SQL Injection in Books Gallery = 4.8.3 versions...