240543 matches found
EUVD-2026-62430
Joomla Extension - yootheme.com - Unauthenticated SQL injection in ItemController::element in Zoo 4.1.64 - The filtertype request value is interpolated into the query as a.type = "..." and the typefilter array as a.type IN "...", with no quoting or escaping...
CVE-2026-74804 Joomla Extension - yootheme.com - Unauthenticated SQL injection in Zoo < 4.1.64
Joomla Extension - yootheme.com - Unauthenticated SQL injection in ItemController::element in Zoo 4.1.64 - The filtertype request value is interpolated into the query as a.type = "..." and the typefilter array as a.type IN "...", with no quoting or escaping...
CVE-2026-74804 Joomla Extension - yootheme.com - Unauthenticated SQL injection in Zoo < 4.1.64
Joomla Extension - yootheme.com - Unauthenticated SQL injection in ItemController::element in Zoo 4.1.64 - The filtertype request value is interpolated into the query as a.type = "..." and the typefilter array as a.type IN "...", with no quoting or escaping...
CVE-2026-74804
Zoo (yootheme.com Joomla extension, versions
CVE-2026-73391
Unauthenticated SQL Injection in Total Donations = 2.0.5 versions...
CVE-2026-73388
Unauthenticated SQL Injection in Nikstore Core = 1.5 versions...
CVE-2026-73183
Unauthenticated SQL Injection in Maps Marker Pro = 4.32 versions...
CVE-2026-73185
Unauthenticated SQL Injection in NGG Smart Image Search 4.0.0 versions...
CVE-2026-66668
Subscriber SQL Injection in Community by PeepSo = 9.0.5.2 versions...
CVE-2026-32552
Subscriber SQL Injection in YITH WooCommerce Membership Premium = 2.33.0 versions...
CVE-2026-71573
creationtimestamp| type| source ---|---|--- 2026-08-19 12:45:09+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-per-joomla-1 2026-08-19 13:35:31+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mtgtx3ssvp26...
CVE-2026-71574
creationtimestamp| type| source ---|---|--- 2026-08-19 12:45:07+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-per-joomla-1 2026-08-19 13:35:31+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mtgtx3ssvp26...
EUVD-2026-62392
Unauthenticated SQL Injection in Total Donations = 2.0.5 versions...
CVE-2026-73391 WordPress Total Donations plugin <= 2.0.5 - SQL Injection vulnerability
Unauthenticated SQL Injection in Total Donations = 2.0.5 versions...
CVE-2026-73391
The WordPress Total Donations plugin (≤2.0.5) has an unauthenticated SQL Injection vulnerability rated CVSS 9.3 Critical. Patchstack reported it; no patch version or in-the-wild exploitation details are provided in the documents.
EUVD-2026-62389
Unauthenticated SQL Injection in Nikstore Core = 1.5 versions...
CVE-2026-73388 WordPress Nikstore Core plugin <= 1.5 - SQL Injection vulnerability
Unauthenticated SQL Injection in Nikstore Core = 1.5 versions...
CVE-2026-73388
Nikstore Core is a WordPress plugin affected by an unauthenticated SQL injection vulnerability in versions ≤ 1.5 . The flaw allows a remote, unauthenticated attacker to inject SQL queries over the network with low complexity, resulting in high confidentiality impact and low availability impact (C...