Exploit for Interpretation Conflict in Wordpress

CVE-2026-63030 + CVE-2026-60137 — WP2Shell Exploit WordPres...

BIT-MYSQL-CLIENT-2026-86047 MariaDB: Insufficient quoting in mariadb-dump and SHOW commands

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, SHOW CREATE SERVER, SHOW CREATE USER, and mariadb-dump are affected because each does not consistently quote identifiers and values when serializing SQL. A...

BIT-MARIADB-MIN-2026-86047 MariaDB: Insufficient quoting in mariadb-dump and SHOW commands

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, SHOW CREATE SERVER, SHOW CREATE USER, and mariadb-dump are affected because each does not consistently quote identifiers and values when serializing SQL. A...

BIT-MARIADB-2026-86047 MariaDB: Insufficient quoting in mariadb-dump and SHOW commands

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, SHOW CREATE SERVER, SHOW CREATE USER, and mariadb-dump are affected because each does not consistently quote identifiers and values when serializing SQL. A...

WordPress Participants Database plugin <= 2.7.8.5 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Tarcísio LuchesiPoystick in WordPress Plugin Participants Database versions = 2.7.8.5...

WordPress GamiPress plugin <= 8.0.7 - SQL Injection vulnerability

SQL Injection vulnerability discovered by leon figueira in WordPress Plugin GamiPress versions = 8.0.7...

CVE-2026-92997

The Click n Chat Chat Widget Integration WordPress plugin before 1.1.3 does not properly validate a parameter before using it as a column identifier in a SQL query, allowing unauthenticated attackers to perform SQL injection attacks...

CVE-2026-92998

The Click n Chat Chat Widget Integration WordPress plugin before 1.1.3 does not sanitise sort parameters before using them in a SQL ORDER BY clause, allowing unauthenticated attackers to perform SQL injection attacks...

CVE-2026-110651

The Swift Performance Lite WordPress plugin before 2.3.7.4 does not properly sanitize and escape a value before using it in a SQL statement, which could allow users with the author role and above to perform SQL injection attacks...

CVE-2026-102499

The Modern Events Calendar Lite WordPress plugin before 7.37.0, Modern Event Calendar Pro WordPress plugin before 7.37.0 do not sanitise and escape a parameter before using it in a SQL statement, which allows authenticated users with Subscriber-level access and above to append additional SQL...

CVE-2026-92998

The Click n Chat (Chat Widget Integration) WordPress plugin versions before 1.1.3 is vulnerable to SQL injection . The root cause is the failure to sanitise sort parameters before they are used in a SQL ORDER BY clause. This flaw allows unauthenticated attackers to perform SQL injection attacks, ...

CVE-2026-92997 Click n Chat < 1.1.3 - Unauthenticated SQLi via 'datacolumn' Parameter

The Click n Chat Chat Widget Integration WordPress plugin before 1.1.3 does not properly validate a parameter before using it as a column identifier in a SQL query, allowing unauthenticated attackers to perform SQL injection attacks...

EUVD-2026-107043

The Click n Chat Chat Widget Integration WordPress plugin before 1.1.3 does not sanitise sort parameters before using them in a SQL ORDER BY clause, allowing unauthenticated attackers to perform SQL injection attacks...

CVE-2026-92998 Click n Chat 1.0.4 - 1.1.2 - Unauthenticated SQLi via 'sort_by'/'sort_order' Parameters

The Click n Chat Chat Widget Integration WordPress plugin before 1.1.3 does not sanitise sort parameters before using them in a SQL ORDER BY clause, allowing unauthenticated attackers to perform SQL injection attacks...

CVE-2026-92997

The Click n Chat (Chat Widget Integration) WordPress plugin, in versions prior to 1.1.3 , is vulnerable to SQL injection . The root cause is the improper validation of a parameter used as a column identifier within a SQL query. This flaw allows unauthenticated attackers to perform SQL injection a...

EUVD-2026-107089

The Click n Chat Chat Widget Integration WordPress plugin before 1.1.3 does not properly validate a parameter before using it as a column identifier in a SQL query, allowing unauthenticated attackers to perform SQL injection attacks...

CVE-2026-92997 Click n Chat < 1.1.3 - Unauthenticated SQLi via 'datacolumn' Parameter

The Click n Chat Chat Widget Integration WordPress plugin before 1.1.3 does not properly validate a parameter before using it as a column identifier in a SQL query, allowing unauthenticated attackers to perform SQL injection attacks...

CVE-2026-92998 Click n Chat 1.0.4 - 1.1.2 - Unauthenticated SQLi via 'sort_by'/'sort_order' Parameters

The Click n Chat Chat Widget Integration WordPress plugin before 1.1.3 does not sanitise sort parameters before using them in a SQL ORDER BY clause, allowing unauthenticated attackers to perform SQL injection attacks...

CVE-2026-110651

The Swift Performance Lite WordPress plugin (versions before 2.3.7.4 ) is vulnerable to SQL injection because it fails to properly sanitize and escape a value before utilizing it in a SQL statement. This vulnerability specifically affects users with the author role and above, who could potentiall...

CVE-2026-110651 Swift Performance Lite < 2.3.7.4 - Author+ SQLi via Image Optimizer

The Swift Performance Lite WordPress plugin before 2.3.7.4 does not properly sanitize and escape a value before using it in a SQL statement, which could allow users with the author role and above to perform SQL injection attacks...