238869 matches found
EUVD-2026-63365
baserCMS before 5.3.0 contains a SQL injection vulnerability in BcDatabaseService.php that allows authenticated administrators to inject attacker-controlled table names and configuration values directly into SQL statements across sequence update, CSV export, and table management operations...
CVE-2026-74011
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in revmakx InfiniteWP Client allows Blind SQL Injection. This issue affects InfiniteWP Client: from n/a through 1.13.9...
EUVD-2026-63348
A vulnerability has been found in code-projects Simple Inventory System 1.0. Affected by this issue is some unknown functionality of the file /delete.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public...
CVE-2026-76990 code-projects Simple Inventory System delete.php sql injection
A vulnerability has been found in code-projects Simple Inventory System 1.0. Affected by this issue is some unknown functionality of the file /delete.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public...
CVE-2026-76990
A proof-of-concept exploit exists for CVE-2026-76990, a SQL injection in the ID argument of /delete.php in code-projects Simple Inventory System 1.0, exploitable remotely without authentication (CVSS 7.3 HIGH). No patch or workaround is mentioned in the provided documents.
CVE-2026-74011 WordPress InfiniteWP Client plugin <= 1.13.9 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in revmakx InfiniteWP Client allows Blind SQL Injection. This issue affects InfiniteWP Client: from n/a through 1.13.9...
EUVD-2026-63324
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in revmakx InfiniteWP Client allows Blind SQL Injection. This issue affects InfiniteWP Client: from n/a through 1.13.9...
CVE-2026-74011
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in revmakx InfiniteWP Client allows Blind SQL Injection. This issue affects InfiniteWP Client: from n/a through 1.13.9...
WordPress InfiniteWP Client plugin <= 1.13.9 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin InfiniteWP Client versions = 1.13.9...
CVE-2026-74013
Subscriber SQL Injection in eShipper Commerce = 2.16.13 versions...
CVE-2026-68566
Unauthenticated SQL Injection in BookingPress Appointment Booking Pro = 6.0.2 versions...
CVE-2026-73998
Subscriber SQL Injection in WP w3all phpBB = 3.0.5 versions...
CVE-2026-66680
Unauthenticated SQL Injection in Locatoraid Store Locator = 3.9.72 versions...
CVE-2026-66649
Unauthenticated SQL Injection in Directory Pro = 2.5.8 versions...
CVE-2026-66609
Unauthenticated SQL Injection in TheGem Elementor = 5.12.3 versions...
CVE-2026-66592
Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress = 4.7.11 versions...
CVE-2026-66593
Unauthenticated SQL Injection in Security & Malware scan by CleanTalk = 2.184 versions...
CVE-2026-66594
Subscriber SQL Injection in WordPress Persistent Login = 3.1.0 versions...