287206 matches found
EUVD-2026-109796
An SQL Injection vulnerability exists in the dashboard widget data API endpoint /api/data/type. Chart filter parameters supplied by the client are not properly validated before they are used in the database queries that build dashboard chart data. An authenticated user with API access can exploit...
CVE-2026-115192
An SQL Injection vulnerability exists in the dashboard widget data API endpoint /api/data/type. Chart filter parameters supplied by the client are not properly validated before they are used in the database queries that build dashboard chart data. An authenticated user with API access can exploit...
CVE-2026-115191
A SQL injection vulnerability exists in a contact lookup AJAX endpoint of the Mautic administration interface /s/ajax. A request parameter that selects the contact field to search by is not properly validated before it is used in a database query. Any authenticated Mautic user can exploit this,...
CVE-2026-115191
A SQL injection vulnerability exists in a contact lookup AJAX endpoint of the Mautic administration interface /s/ajax. A request parameter that selects the contact field to search by is not properly validated before it is used in a database query. Any authenticated Mautic user can exploit this,...
CVE-2026-115191
A SQL injection vulnerability exists in a contact lookup AJAX endpoint of the Mautic administration interface /s/ajax. A request parameter that selects the contact field to search by is not properly validated before it is used in a database query. Any authenticated Mautic user can exploit this,...
EUVD-2026-109794
A SQL injection vulnerability exists in a contact lookup AJAX endpoint of the Mautic administration interface /s/ajax. A request parameter that selects the contact field to search by is not properly validated before it is used in a database query. Any authenticated Mautic user can exploit this,...
CVE-2026-115191
A SQL injection vulnerability exists in a contact lookup AJAX endpoint of the Mautic administration interface /s/ajax. A request parameter that selects the contact field to search by is not properly validated before it is used in a database query. Any authenticated Mautic user can exploit this,...
CVE-2026-115191
A SQL injection vulnerability exists in the contact lookup AJAX endpoint (/s/ajax) of the Mautic administration interface. The root cause is a failure to properly validate a request parameter used to select the contact field for database queries. This flaw allows any authenticated Mautic user , r...
WordPress BuddyPress plugin <= 14.5.2 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Ayukiab in WordPress Plugin BuddyPress versions = 14.5.2...
WordPress FunnelKit Automations plugin <= 3.8.5.2 - SQL Injection vulnerability
SQL Injection vulnerability discovered by AndrewN in WordPress Plugin FunnelKit Automations versions = 3.8.5.2...
WordPress DXP ToolKit plugin <= 2.0.1 - SQL Injection vulnerability
SQL Injection vulnerability discovered by V1T in WordPress Plugin DXP ToolKit versions = 2.0.1...
frevvomapexec
frevvomapexec frevvomapexec is a script to verify the existence of a blind SQL injection vulnerability by injecting a delay of your choosing in seconds in Square 9 GlobalForms 6.2. To verify the vulnerability is legitimate, the end user will be required to do math e.g. Subtracting the smaller...
CVE-2026-115608
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Crocoblock JetEngine jet-engine allows SQL Injection.This issue affects JetEngine: from n/a through 3.9.0...
CVE-2026-115948
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Blind SQL Injection.This issue affects Media LIbrary Assistant: from n/a through 3.42...
EUVD-2026-109727
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Crocoblock JetEngine jet-engine allows SQL Injection.This issue affects JetEngine: from n/a through 3.9.0...
CVE-2026-115608 WordPress JetEngine plugin <= 3.9.0 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Crocoblock JetEngine jet-engine allows SQL Injection.This issue affects JetEngine: from n/a through 3.9.0...
CVE-2026-115608
The Crocoblock JetEngine plugin for WordPress is vulnerable to SQL Injection in versions up to and including 3.9.0 . The root cause is the Improper Neutralization of Special Elements used in an SQL Command (CWE-89) within the jet-engine component. This vulnerability could allow an attacker to exe...
CVE-2026-115608 WordPress JetEngine plugin <= 3.9.0 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Crocoblock JetEngine jet-engine allows SQL Injection.This issue affects JetEngine: from n/a through 3.9.0...
WordPress JetEngine plugin <= 3.9.0 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Ayukiab in WordPress Plugin JetEngine versions = 3.9.0...
CVE-2026-115948 WordPress Media LIbrary Assistant plugin <= 3.42 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Blind SQL Injection.This issue affects Media LIbrary Assistant: from n/a through 3.42...