239101 matches found
CVE-2026-73365
Unauthenticated SQL Injection in JetAppointment = 2.5.2 versions...
CVE-2026-73365
The JetAppointment WordPress plugin (versions 2.5.2 and earlier) contains an unauthenticated SQL injection, exploitable over the network with no credentials, allowing attackers to read sensitive database data; CVSS 9.3 critical. Patchstack's advisory link is provided for details. Exploitation det...
EUVD-2026-60780
Unauthenticated SQL Injection in Affiliates Manager = 2.9.53 versions...
CVE-2026-73355 WordPress Affiliates Manager plugin <= 2.9.53 - SQL Injection vulnerability
Unauthenticated SQL Injection in Affiliates Manager = 2.9.53 versions...
CVE-2026-73355
Unauthenticated SQL injection affects Affiliates Manager plugin ≤2.9.53, allowing remote attackers to extract sensitive database data (CVSS 9.3 critical). Patchstack reports the flaw; no patch version or exploit details are provided in the documents. Upgrade to the latest plugin version once avai...
CVE-2026-73355
Unauthenticated SQL Injection in Affiliates Manager = 2.9.53 versions...
CVE-2026-73345 WordPress License Manager for WooCommerce plugin <= 3.0.18 - SQL Injection vulnerability
Customer SQL Injection in License Manager for WooCommerce = 3.0.18 versions...
CVE-2026-73345
Customer SQL Injection in License Manager for WooCommerce = 3.0.18 versions...
CVE-2026-73345
SQL injection in License Manager for WooCommerce
EUVD-2026-60775
Customer SQL Injection in License Manager for WooCommerce = 3.0.18 versions...
CVE-2026-73339
Affected product: Modern Events Calendar plugin for WordPress. Root cause: SQL injection vulnerability exploitable without authentication in versions below 7.35.0. Impact: CVSS 9.3 (CRITICAL), network-exploitable with no privileges or user interaction, enabling high confidentiality impact. Remedi...
CVE-2026-73339 WordPress Modern Events Calendar plugin < 7.35.0 - SQL Injection vulnerability
Unauthenticated SQL Injection in Modern Events Calendar 7.35.0 versions...
EUVD-2026-60770
Unauthenticated SQL Injection in Modern Events Calendar 7.35.0 versions...
CVE-2026-73339 WordPress Modern Events Calendar plugin < 7.35.0 - SQL Injection vulnerability
Unauthenticated SQL Injection in Modern Events Calendar 7.35.0 versions...
CVE-2026-73339
Unauthenticated SQL Injection in Modern Events Calendar 7.35.0 versions...
CVE-2026-73187
Unauthenticated SQL Injection in Sticky Chat Widget = 1.4.2 versions...
CVE-2026-73187 WordPress Sticky Chat Widget plugin <= 1.4.2 - SQL Injection vulnerability
Unauthenticated SQL Injection in Sticky Chat Widget = 1.4.2 versions...
CVE-2026-73187
The WordPress Sticky Chat Widget plugin (versions ≤ 1.4.2) contains an unauthenticated SQL Injection vulnerability, discovered by Nguyen Ba Khanh of HPT Vietnam Corporation. CVSS 3.1 scores it 9.3 (Critical) for network-exploitable high confidentiality impact. CISA SSVC rates it automatable with ...