Unauthenticated SQL Injection in Church Admin <= 5.1.1 versions.
CVE-2026-66478
Unauthenticated SQL Injection in Church Admin <= 5.1.1 versions.
2026-08-14 归档
今日共收录 1589 条安全情报，包含 784 个 CVE，406 篇安全通告，以及 115 篇研究论文。
← 返回归档列表Unauthenticated SQL Injection in Everest Backup <= 2.3.12 versions.
CVE-2026-66472
Unauthenticated SQL Injection in Everest Backup <= 2.3.12 versions.
Unauthenticated Broken Authentication in Cartify <= 1.3.0.1 versions.
CVE-2026-66465
Unauthenticated Broken Authentication in Cartify <= 1.3.0.1 versions.
Unauthenticated SQL Injection in RealPress <= 1.1.2 versions.
CVE-2026-66458
Unauthenticated SQL Injection in RealPress <= 1.1.2 versions.
Unauthenticated Broken Authentication in Salon booking system <= 10.30.26 versions.
CVE-2026-66453
Unauthenticated Broken Authentication in Salon booking system <= 10.30.26 versions.
Subscriber SQL Injection in If-So Dynamic Content Personalization <= 1.10 versions.
CVE-2026-66446
Subscriber SQL Injection in If-So Dynamic Content Personalization <= 1.10 versions.
Unauthenticated SQL Injection in Active Products Tables for WooCommerce <= 1.1.1 versions.
CVE-2026-66436
Unauthenticated SQL Injection in Active Products Tables for WooCommerce <= 1.1.1 versions.
Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 3.9.7 versions.
CVE-2026-66424
Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 3.9.7 versions.
Unauthenticated SQL Injection in Listdom <= 5.6.0 versions.
CVE-2026-61969
Unauthenticated SQL Injection in Listdom <= 5.6.0 versions.
Unauthenticated Privilege Escalation in miniorange otp verification <= 5.5.1 versions.
CVE-2026-61967
Unauthenticated Privilege Escalation in miniorange otp verification <= 5.5.1 versions.
Subscriber SQL Injection in WPJAM Basic <= 7.0.1 versions.
CVE-2026-61966
Subscriber SQL Injection in WPJAM Basic <= 7.0.1 versions.
Unauthenticated Arbitrary Code Execution in WP BASE Booking <= 6.3.0 versions.
CVE-2026-61962
Unauthenticated Arbitrary Code Execution in WP BASE Booking <= 6.3.0 versions.
Unauthenticated Broken Authentication in Log in with Google <= 1.4.2 versions.
CVE-2026-28185
Unauthenticated Broken Authentication in Log in with Google <= 1.4.2 versions.
Unauthenticated PHP Object Injection in Headless Single Sign On <= 1.6 versions.
CVE-2026-28149
Unauthenticated PHP Object Injection in Headless Single Sign On <= 1.6 versions.
Unauthenticated Bypass Vulnerability in Headless Single Sign On <= 1.6 versions.
CVE-2026-28148
Unauthenticated Bypass Vulnerability in Headless Single Sign On <= 1.6 versions.
Unauthenticated SQL Injection in Web Directory Free <= 1.7.13 versions.
CVE-2026-28142
Unauthenticated SQL Injection in Web Directory Free <= 1.7.13 versions.
Unauthenticated Broken Authentication in OAuth Single Sign On – SSO (OAuth Client) <= 7.0.0 versions.
CVE-2026-28008
Unauthenticated Broken Authentication in OAuth Single Sign On – SSO (OAuth Client) <= 7.0.0 versions.
Unauthenticated SQL Injection in WP Directory Kit <= 1.5.4 versions.
CVE-2026-28001
Unauthenticated SQL Injection in WP Directory Kit <= 1.5.4 versions.
Unauthenticated Remote Code Execution (RCE) in QA Analytics <= 5.2.0.0 versions.
CVE-2026-27544
Unauthenticated Remote Code Execution (RCE) in QA Analytics <= 5.2.0.0 versions.
WebErpMesv2 is a Resource Management and Manufacturing execution system Web for industry. Versions 1.19 and prior allow any self-registered user to upload arbitrary PHP files th...
CVE-2026-49827
WebErpMesv2 is a Resource Management and Manufacturing execution system Web for industry. Versions 1.19 and prior allow