CVE-2026-32581 WordPress Mooberry Book Manager plugin 4.16.2 - SQL Injection vulnerability

Subscriber SQL Injection in Mooberry Book Manager 4.16.2 versions...

CVE-2026-32581

The Mooberry Book Manager plugin for WordPress (version 4.16.2 ) is vulnerable to a Subscriber SQL Injection (CWE-89). This vulnerability allows for improper neutralization of special elements used in an SQL command, potentially impacting the database. The CVSS 3.1 score is 7.1 (High) , with a ne...

EUVD-2026-93242

Subscriber SQL Injection in Mooberry Book Manager 4.16.2 versions...

CVE-2026-32580

The WordPress WooCommerce Lottery plugin in versions

EUVD-2026-93241

Unauthenticated SQL Injection in WooCommerce Lottery = 2.2.9 versions...

CVE-2026-32580 WordPress WooCommerce Lottery plugin <= 2.2.9 - SQL Injection vulnerability

Unauthenticated SQL Injection in WooCommerce Lottery = 2.2.9 versions...

EUVD-2026-93230

Unauthenticated SQL Injection in WooCommerce Appointments = 5.3.2 versions...

CVE-2026-32557 WordPress WooCommerce Appointments plugin <= 5.3.2 - SQL Injection vulnerability

Unauthenticated SQL Injection in WooCommerce Appointments = 5.3.2 versions...

CVE-2026-32557

The WooCommerce Appointments plugin for WordPress versions

EUVD-2026-93229

Subscriber SQL Injection in WP2LEADS = 3.5.7 versions...

CVE-2026-25434 WordPress WP2LEADS plugin <= 3.5.7 - SQL Injection vulnerability

Subscriber SQL Injection in WP2LEADS = 3.5.7 versions...

CVE-2026-25434

The WP2LEADS plugin for WordPress (versions

CVE-2026-4889

The eLoanApp platform by RDL Technologies contains a SQL injection (SQLi) vulnerability in the '/ajax/users.php?op=verify' endpoint. The vulnerability exists in the 'logina' POST parameter, which is susceptible to both boolean-based and time-based SQL injection. Successful exploitation enables an...

CVE-2026-4889 SQL Injection (SQLi) in eLoanApp Platform by RDL Technologies

SQL injection SQLi vulnerability in the eLoanApp application, specifically in the POST parameter 'logina' of the user process endpoint '/ajax/users.php?op=verify'. The parameter is vulnerable to boolean-based and time-based SQL injection. Successfully exploiting this vulnerability would allow an...

EUVD-2026-93227

SQL injection SQLi vulnerability in the eLoanApp application, specifically in the POST parameter 'logina' of the user process endpoint '/ajax/users.php?op=verify'. The parameter is vulnerable to boolean-based and time-based SQL injection. Successfully exploiting this vulnerability would allow an...

CVE-2026-105807

A vulnerability was found in SourceCodester Simple Student Information System 1.0. This affects an unknown part of the file searchquery.php. Performing a manipulation results in sql injection. The attack can be initiated remotely...

wp2shell-detect

wp2shell-detect Blackbox, неинтрузивный детектор для wp2shell — цепочка RCE до аутентификации в ядре WordPress, обнародованная 2026-07-17: CVE-2026-63030 — путаница маршрутов в конечной точке пакетного REST /wp-json/batch/v1: подзапрос, путь которого не проходит wpparseurl, попадает в массив...

sqlipy

sqlipy SQLiPy is a Python plugin for Burp Suite that integrates SQLMap using the SQLMap API. SQLMap comes with a RESTful based server that will execute SQLMap scans. This plugin can start the API for you or connect to an already running API to perform a scan. Requirements Jython 2.7 up to 2.7.2 D...

EUVD-2026-93018

A vulnerability was found in SourceCodester Simple Student Information System 1.0. This affects an unknown part of the file searchquery.php. Performing a manipulation results in sql injection. The attack can be initiated remotely...

CVE-2026-105807

A SQL injection vulnerability exists in SourceCodester Simple Student Information System 1.0 . The flaw is located within an unspecified part of the searchquery.php file, where improper input handling allows for remote manipulation. An attacker can exploit this to execute arbitrary SQL commands. ...