PT-2026-97387

Name of the Vulnerable Software and Affected Versions Moodle Socialwall plugin versions 3.0 through 3.3 Description A SQL injection flaw allows an attacker to execute arbitrary code by sending specially crafted HTTP requests. SQL injection is a technique where malicious SQL statements are inserte...

CVE-2025-63564

SQL injection vulnerability in Moodle Socialwall plugin v.3.0 through v.3.3 allows an attacker to execute arbitrary code via crafted HTTP requests...

CVE-2025-63564: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Moodle Socialwall plugin v.3.0 through v.3.3 allows an attacker to execute arbitrary code via crafted HTTP requests...

PT-2026-97445

Contributor SQL Injection in Live Copy Paste for Elementor = 1.5.10 versions...

PT-2026-97241

Name of the Vulnerable Software and Affected Versions Rename wp-login.php to anything you want versions prior to 2.0.2 Description The plugin is subject to time-based SQL Injection, a technique where an attacker sends a query that forces the database to wait a specific amount of time before...

Cisco Identity Services Engine SQL Injection

The vulnerability of the Cisco Identity Services Engine ISE platform relates to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Cisco Identity Services Engine SQL Injection

The vulnerability of the Cisco Identity Services Engine ISE platform relates to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Fedora 44 : postgresql16-anonymizer (2026-58a319c686)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-58a319c686 advisory. Upstream changelog: https://gitlab.com/dalibo/postgresqlanonymizer/-/releases - core CVE-2026-19633: Escalation via custom types, operators and...

PT-2026-97125

Name of the Vulnerable Software and Affected Versions SourceCodester Online Reviewer Management System version 1.0 Description A remote SQL injection is possible due to improper handling of the test id argument within an unknown function in the '/reviewer 0/admins/assessments/pretest/btn...

CVE-2026-95927: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in SourceCodester Online Reviewer Management System 1.0. This affects an unknown function of the file /reviewer0/admins/assessments/pretest/exam-delete.php. Such manipulation of the argument testid leads to sql injection. The attack may be performed from remote. The...

CVE-2026-94174: Improper Neutralization of Special Elements used in an SQL Command

Administrator SQL Injection in Email Log = 2.63 versions...

PT-2026-97487

Editor SQL Injection in Ultimeter = 3.0.8 versions...

CVE-2025-63564

SQL injection vulnerability in Moodle Socialwall plugin v.3.0 through v.3.3 allows an attacker to execute arbitrary code via crafted HTTP requests...

CVE-2022-4997: Improper Neutralization of Special Elements used in an SQL Command

The jet-form-builder-stripe-gateway WordPress plugin before 1.1.0 does not sanitise and escape a payment token before using it in a SQL statement, allowing unauthenticated users to extract arbitrary data from the database, including password hashes...

PT-2026-97193

Name of the Vulnerable Software and Affected Versions Booking Manager WordPress plugin versions prior to 2.1.21 Description Authenticated users with Author-level access and above can perform SQL injection attacks. This occurs because the plugin fails to sanitize and escape values retrieved from a...

CVE-2026-95590: Improper Neutralization of Special Elements used in an SQL Command

Subscriber SQL Injection in Tainacan = 1.2.0 versions...

PT-2026-97346

Isotope eCommerce through 2.9.10 contains a blind SQL injection vulnerability in backend callbacks that interpolate request-controlled identifiers and administrator-supplied values directly into SQL statements. Authenticated Contao backend users with Isotope module permissions can exploit...

PT-2026-97609

Name of the Vulnerable Software and Affected Versions SoftNews Media Group DataLife Engine version 18.0 Description An issue exists in the Search Module within the strip data function of the engine/modules/search.php file. A remote attacker can trigger a SQL injection by manipulating the story...

PT-2026-97607

Name of the Vulnerable Software and Affected Versions Abdurrab5 online-makeup-store affected versions not specified Description An issue exists in the Customer Login Handler component within the customerSignin.php file. Remote manipulation of the username and password arguments allows for SQL...

PT-2026-97554

Name of the Vulnerable Software and Affected Versions W4 Post List versions prior to 3.0.6 Description An improper neutralization of special elements used in an SQL command allows for Blind SQL Injection. Blind SQL Injection is a technique where an attacker asks the database true or false questio...