238998 matches found
CVE-2026-73355
Unauthenticated SQL Injection in Affiliates Manager = 2.9.53 versions...
CVE-2026-73339
Unauthenticated SQL Injection in Modern Events Calendar 7.35.0 versions...
CVE-2026-73187
Unauthenticated SQL Injection in Sticky Chat Widget = 1.4.2 versions...
CVE-2026-66622
Unauthenticated SQL Injection in Depicter Slider = 4.8.0 versions...
CVE-2026-32466
Subscriber SQL Injection in Gravity Forms Bookings premium = 2.1 versions...
EUVD-2026-60819
Unauthenticated SQL Injection in Readabler 2.0.18 versions...
CVE-2026-74015 WordPress Readabler plugin < 2.0.18 - SQL Injection vulnerability
Unauthenticated SQL Injection in Readabler 2.0.18 versions...
CVE-2026-74015 WordPress Readabler plugin < 2.0.18 - SQL Injection vulnerability
Unauthenticated SQL Injection in Readabler 2.0.18 versions...
CVE-2026-74015
The WordPress Readabler plugin (versions before 2.0.18) has an unauthenticated SQL injection flaw allowing remote attackers to execute arbitrary SQL queries and exfiltrate sensitive data. CVSS 9.3 (Critical). PatchStack reports it; upgrading to 2.0.18 resolves the issue. No exploit code provided ...
CVE-2026-73392 WordPress Super Store Finder plugin <= 7.8 - SQL Injection vulnerability
Unauthenticated SQL Injection in Super Store Finder = 7.8 versions...
CVE-2026-73392 WordPress Super Store Finder plugin <= 7.8 - SQL Injection vulnerability
Unauthenticated SQL Injection in Super Store Finder = 7.8 versions...
CVE-2026-73392
The WordPress Super Store Finder plugin (versions ≤7.8) has an unauthenticated SQL injection flaw, allowing remote attackers to execute arbitrary SQL queries without credentials. Patchstack rates it CRITICAL (CVSS 9.3). No patch or exploit details are provided in the documents.
CVE-2026-73392
Unauthenticated SQL Injection in Super Store Finder = 7.8 versions...
EUVD-2026-60799
Unauthenticated SQL Injection in Super Store Finder = 7.8 versions...
CVE-2026-73365 WordPress JetAppointment plugin <= 2.5.2 - SQL Injection vulnerability
Unauthenticated SQL Injection in JetAppointment = 2.5.2 versions...
CVE-2026-73365 WordPress JetAppointment plugin <= 2.5.2 - SQL Injection vulnerability
Unauthenticated SQL Injection in JetAppointment = 2.5.2 versions...
EUVD-2026-60787
Unauthenticated SQL Injection in JetAppointment = 2.5.2 versions...
CVE-2026-73365
Unauthenticated SQL Injection in JetAppointment = 2.5.2 versions...
CVE-2026-73365
The JetAppointment WordPress plugin (versions 2.5.2 and earlier) contains an unauthenticated SQL injection, exploitable over the network with no credentials, allowing attackers to read sensitive database data; CVSS 9.3 critical. Patchstack's advisory link is provided for details. Exploitation det...