#cwe-89

共收录 2523 条相关情报。

漏洞预警2026-10-11 发布INFO

The Datalist it WordPress plugin through 0.0.3 does not sanitize and escape several request parameters before using them to build a SQL query, allowing unauthenticated attackers...

CVE-2026-89285

The Datalist it WordPress plugin through 0.0.3 does not sanitize and escape several request parameters before using them

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-11 发布INFO

The WP-Partner WordPress plugin through 1.2.1 does not sanitise and escape a parameter before using it in a SQL query, allowing unauthenticated attackers to append additional SQ...

CVE-2026-89234

The WP-Partner WordPress plugin through 1.2.1 does not sanitise and escape a parameter before using it in a SQL query, a

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-11 发布INFO

The Recordbrowser WordPress plugin through 1.1.7 does not sanitise and escape a parameter before using it in a SQL query, allowing unauthenticated attackers to append additional...

CVE-2026-89232

The Recordbrowser WordPress plugin through 1.1.7 does not sanitise and escape a parameter before using it in a SQL query

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-11 发布INFO

The WpCues Basic Quiz WordPress plugin through 1.6.5 does not properly sanitise and escape values before using them in a SQL statement, which allows unauthenticated attackers to...

CVE-2026-89214

The WpCues Basic Quiz WordPress plugin through 1.6.5 does not properly sanitise and escape values before using them in a

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-11 发布INFO

The Llavero.io WordPress plugin through 0.1.4 does not properly sanitise and escape a parameter before using it in a SQL statement, which allows unauthenticated attackers to per...

CVE-2026-89213

The Llavero.io WordPress plugin through 0.1.4 does not properly sanitise and escape a parameter before using it in a SQL

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-11 发布INFO

The Site Setup Wizard WordPress plugin through 1.5.8 does not properly sanitise and escape a parameter before using it in a SQL statement, which allows unauthenticated attackers...

CVE-2026-89195

The Site Setup Wizard WordPress plugin through 1.5.8 does not properly sanitise and escape a parameter before using it i

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-11 发布INFO

The Social Web Suite WordPress plugin through 4.1.12 does not require its shared secret to be set before accepting requests authorised by it, and does not sanitise and escape a...

CVE-2026-88930

The Social Web Suite WordPress plugin through 4.1.12 does not require its shared secret to be set before accepting requ

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-11 发布INFO

The Tcard WP WordPress plugin through 1.8.0 does not sanitise and escape a parameter before using it in a SQL statement in one of its unauthenticated AJAX actions, allowing unau...

CVE-2026-81420

The Tcard WP WordPress plugin through 1.8.0 does not sanitise and escape a parameter before using it in a SQL statement

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-11 发布INFO

A vulnerability has been found in highwarden Super Store Finder up to 3.8. Affected is an unknown function of the file /products/superstorefinder/index.php. The manipulation of ...

CVE-2026-108541

A vulnerability has been found in highwarden Super Store Finder up to 3.8. Affected is an unknown function of the file /

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-10-11 发布INFO

The Mobile builder WordPress plugin through 1.4.2 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL inje...

CVE-2026-103695

The Mobile builder WordPress plugin through 1.4.2 does not sanitise and escape a parameter before using it in a SQL stat

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-10 发布INFO

Subscriber SQL Injection in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions.

CVE-2026-62117

Subscriber SQL Injection in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-10 发布INFO

Unauthenticated SQL Injection in uListing <= 2.2.0 versions.

CVE-2026-62031

Unauthenticated SQL Injection in uListing <= 2.2.0 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-10 发布INFO

Administrator SQL Injection in WP Ultimate CSV Importer <= 9.2 versions.

CVE-2026-45440

Administrator SQL Injection in WP Ultimate CSV Importer <= 9.2 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-10 发布INFO

Administrator SQL Injection in Frontend Admin by DynamiApps <= 3.29.13 versions.

CVE-2026-42722

Administrator SQL Injection in Frontend Admin by DynamiApps <= 3.29.13 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-10 发布INFO

Administrator SQL Injection in Leyka <= 3.32.3 versions.

CVE-2026-42717

Administrator SQL Injection in Leyka <= 3.32.3 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-10 发布INFO

Subscriber SQL Injection in Qode Tours <= 3.1.3.2 versions.

CVE-2026-42712

Subscriber SQL Injection in Qode Tours <= 3.1.3.2 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-10 发布INFO

Subscriber SQL Injection in Events Manager <= 7.4.6 versions.

CVE-2026-42633

Subscriber SQL Injection in Events Manager <= 7.4.6 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-10 发布INFO

Subscriber SQL Injection in ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes <= 1.5.3 versions.

CVE-2026-40800

Subscriber SQL Injection in ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes <= 1.5.3 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-10 发布INFO

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tickera Tickera tickera-event-ticketing-system allows Blind SQL Injection.T...

CVE-2026-105889

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tickera Tickera ti

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-10 发布INFO

The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to generic SQL Injection via 'booking[service_id]' Parameter ...

CVE-2026-96662

The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to g

历史摘要 · 未重新核验 · NVD

#cve #cwe-89