CVE-2026-102251 Abandoned Cart Pro for WooCommerce <= 10.8.0 - Unauthenticated SQL Injection via AES-CTR Ciphertext Forgery in 'validate' Parameter

The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'validate' parameter in all versions up to, and including, 10.8.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. Th...

CVE-2026-102251

The Abandoned Cart Pro for WooCommerce plugin for WordPress (versions

EUVD-2018-13262

Malware in sbrugna...

CVE-2023-53019

CVE-2023-53019 concerns the Linux kernel: the net/mdio subsystem allowed an out-of-bounds access in mdiobus_get_phy() when an invalid addr is passed (e.g., -1 in stmmac_init_phy). The advisory notes that addr must be validated before use to prevent access to mdio_map. Impact is described as high,...

GSD-2023-1002285 net: mdio: validate parameter addr in mdiobus_get_phy()

net: mdio: validate parameter addr in mdiobusgetphy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.305 by commit...

Sql injection

CubeCart before 6.1.13 has SQL Injection via the validate parameter of the "I forgot my Password!" feature...

CVE-2018-20716

CubeCart before 6.1.13 has SQL Injection via the validate parameter of the "I forgot my Password!" feature...

PT-2015-7409

Name of the Vulnerable Software and Affected Versions CubeCart versions 5.2.12 through 5.2.16 CubeCart versions 6.x before 6.0.7 Description The issue arises from improper validation of password reset requests, allowing remote attackers to change the administrator password. This can be achieved b...