238869 matches found
CVE-2026-66593
Unauthenticated SQL Injection in Security & Malware scan by CleanTalk = 2.184 versions...
EUVD-2026-63336
Unauthenticated SQL Injection in Security & Malware scan by CleanTalk = 2.184 versions...
CVE-2026-66593 WordPress Security & Malware scan by CleanTalk plugin <= 2.184 - SQL Injection vulnerability
Unauthenticated SQL Injection in Security & Malware scan by CleanTalk = 2.184 versions...
EUVD-2026-63335
Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress = 4.7.11 versions...
CVE-2026-66592 WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.11 - SQL Injection vulnerability
Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress = 4.7.11 versions...
CVE-2026-66592
An unauthenticated SQL injection vulnerability affects the rtMedia plugin for WordPress, BuddyPress, and bbPress at versions 4.7.11 and below. With a CVSS 3.1 base score of 9.3 (Critical), it allows remote attackers with no credentials to execute arbitrary SQL queries, potentially exposing sensit...
CVE-2025-15688 WordPress Capella theme <= 2.5.5 - SQL Injection vulnerability
Unauthenticated SQL Injection in Capella = 2.5.5 versions...
EUVD-2025-210755
Unauthenticated SQL Injection in Capella = 2.5.5 versions...
CVE-2025-15688
The Capella WordPress theme (versions ≤ 2.5.5) has an unauthenticated SQL injection vulnerability, exploitable over the network with no credentials. CVSS 9.3 (Critical) reflects high confidentiality and low availability impact. PatchStack documents the finding; no patch version or exploit details...
CVE-2026-77071
n8n versions before 1.123.69, 2.33.4, and 2.34.1 are vulnerable to PostgREST filter injection in the Supabase node's Row Get Many, Delete, and Update operations, where an expression-bindable value is concatenated into filter queries without escaping, allowing an attacker to widen filters to full-...
WordPress Term Pages plugin < 2.0.0 - Unauthenticated SQL Injection via tp_lookup vulnerability
Unauthenticated SQL Injection via tplookup vulnerability discovered by João Ramos Maciel in WordPress Plugin Term Pages versions 2.0.0...
WordPress Download Monitor plugin < 5.2.6 - Unauthenticated Download Log Injection vulnerability
Unauthenticated Download Log Injection vulnerability discovered by Anirudh Gupta in WordPress Plugin Download Monitor versions 5.2.6...
WordPress LogMyTrip plugin <= 1.9 - Unauthenticated SQL Injection via 'tid' Cookie vulnerability
Unauthenticated SQL Injection via 'tid' Cookie vulnerability discovered by Pablo González Pérez, Francisco José Ramírez Vicente and Iñigo Sánchez Enciso in WordPress Plugin LogMyTrip versions = 1.9...
WordPress Link Library plugin < 7.9.3 - Unauthenticated SQL Injection via the Front-End Link Submission Form vulnerability
Unauthenticated SQL Injection via the Front-End Link Submission Form vulnerability discovered by Abdullah Kareem cyberkareem in WordPress Plugin Link Library versions 7.9.3...
WordPress SM Page Duplicator plugin <= 1.0.0 - Editor+ SQL Injection via Page Duplication vulnerability
Editor+ SQL Injection via Page Duplication vulnerability discovered by Pablo González Pérez, Francisco José Ramírez Vicente and Iñigo Sánchez Enciso in WordPress Plugin sm page duplicator versions = 1.0.0...
NetMRI Unauthenticated SQL Injection via skipjackUsername
An issue was discovered in Infoblox NETMRI before 7.6.1. Unauthenticated SQL Injection can occur. id: CVE-2025-32814 info: name: NetMRI Unauthenticated SQL Injection via skipjackUsername author: iamnoooob,pdresearch severity: critical description: | An issue was discovered in Infoblox NETMRI befo...
phpMyAdmin <4.8.5 - Local File Inclusion
phpMyAdmin before 4.8.5 is susceptible to local file inclusion. When the AllowArbitraryServer configuration setting is set to true, an attacker can read, with the use of a rogue MySQL server, any file on the server that the web server's user can access. This is related to the mysql.allowlocalinfi...
Themes Coder Ecommerce <= 1.3.4 - SQL Injection
The Themes Coder Ecommerce WordPress plugin through 1.3.4 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection. id: CVE-2024-13726 info: name: Themes Coder Ecommerce = 1.3.4 - SQL...
74cms - ajax_officebuilding.php SQL Injection
A SQL injection vulnerability exists in 74cms 3.2.0 via the x parameter to ajaxofficebuilding.php. id: CVE-2020-22210 info: name: 74cms - ajaxofficebuilding.php SQL Injection author: ritikchaddha severity: critical description: | A SQL injection vulnerability exists in 74cms 3.2.0 via the x...
Prestashop posstaticfooter <= 1.0.0 - SQL Injection
Prestashop posstaticfooter = 1.0.0 is vulnerable to SQL Injection via posstaticfooter::getPosCurrentHook. id: CVE-2023-30194 info: name: Prestashop posstaticfooter = 1.0.0 - SQL Injection author: daffainfo severity: critical description: | Prestashop posstaticfooter = 1.0.0 is vulnerable to SQL...