The Smart Manager – Advanced WooCommerce Bulk Edit & Inventory Management plugin for WordPress is vulnerable to generic SQL Injection via the 'access_privileges' parameter in al...

CVE-2026-18443

The Smart Manager – Advanced WooCommerce Bulk Edit & Inventory Management plugin for WordPress is vulnerable to generic

历史摘要 · 未重新核验 · NVD

The Unlimited Elements for Elementor WordPress plugin before 2.0.21 does not sanitise and escape...

CVE-2026-92923

The Unlimited Elements for Elementor WordPress plugin before 2.0.21 does not sanitise and escape a parameter before usin

历史摘要 · 未重新核验 · GitHub Advisory

The SaveTo Wishlist Lite WordPress plugin before 1.1.5 does not sanitise and escape parameters...

CVE-2026-89236

The SaveTo Wishlist Lite WordPress plugin before 1.1.5 does not sanitise and escape parameters before using them in the

历史摘要 · 未重新核验 · GitHub Advisory

The Unlimited Elements for Elementor WordPress plugin before 2.0.21 does not correctly handle a...

CVE-2026-85568

The Unlimited Elements for Elementor WordPress plugin before 2.0.21 does not correctly handle a search value before rewr

历史摘要 · 未重新核验 · GitHub Advisory

The GeoDirectory plugin for WordPress is vulnerable to SQL Injection via the stored latitude...

CVE-2026-103913

The GeoDirectory plugin for WordPress is vulnerable to SQL Injection via the stored latitude/longitude coordinates of a

历史摘要 · 未重新核验 · GitHub Advisory

The Unlimited Elements for Elementor WordPress plugin before 2.0.21 does not sanitise and escape a parameter before using it in a SQL statement, allowing users with a role as lo...

CVE-2026-92923

The Unlimited Elements for Elementor WordPress plugin before 2.0.21 does not sanitise and escape a parameter before usin

历史摘要 · 未重新核验 · NVD

The SaveTo Wishlist Lite WordPress plugin before 1.1.5 does not sanitise and escape parameters before using them in the ORDER BY clause of a SQL query, allowing unauthenticated...

CVE-2026-89236

The SaveTo Wishlist Lite WordPress plugin before 1.1.5 does not sanitise and escape parameters before using them in the

历史摘要 · 未重新核验 · NVD

The Unlimited Elements for Elementor WordPress plugin before 2.0.21 does not correctly handle a search value before rewriting an already prepared SQL statement, allowing unauthe...

CVE-2026-85568

The Unlimited Elements for Elementor WordPress plugin before 2.0.21 does not correctly handle a search value before rewr

历史摘要 · 未重新核验 · NVD

The GeoDirectory plugin for WordPress is vulnerable to SQL Injection via the stored latitude/longitude coordinates of a listing in versions up to, and including, 2.8.186. This i...

CVE-2026-103913

The GeoDirectory plugin for WordPress is vulnerable to SQL Injection via the stored latitude/longitude coordinates of a

历史摘要 · 未重新核验 · NVD

The SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent plugin for WordPress is...

CVE-2026-94539

The SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent plugin for WordPress is vulnerable to time-bas

历史摘要 · 未重新核验 · GitHub Advisory

The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is...

CVE-2026-95865

The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to blind SQL Injectio

历史摘要 · 未重新核验 · GitHub Advisory

The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to blind SQL Injection via 'fields[][value]' Parameter in all versions up to, ...

CVE-2026-95865

The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to blind SQL Injectio

历史摘要 · 未重新核验 · NVD

The SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent plugin for WordPress is vulnerable to time-based SQL Injection via the 'sort_by' parameter in all versi...

CVE-2026-94539

The SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent plugin for WordPress is vulnerable to time-bas

历史摘要 · 未重新核验 · NVD

Trigger.dev: Cross-tenant SQL injection in the TSQL query compiler (POST /api/v1/query) via unsanitized window-function name

### Summary A cross-tenant SQL injection in the TSQL query compiler lets **any authenticated trigger.dev customer read

历史摘要 · 未重新核验 · GitHub Advisory

UTMStack before 11.2.16 contains a JPQL injection vulnerability that allows authenticated...

CVE-2026-82045

UTMStack before 11.2.16 contains a JPQL injection vulnerability that allows authenticated attackers to read arbitrary en

历史摘要 · 未重新核验 · GitHub Advisory

UTMStack before 11.2.16 contains a SQL injection vulnerability in UtmAssetGroupService...

CVE-2026-82039

UTMStack before 11.2.16 contains a SQL injection vulnerability in UtmAssetGroupService.searchQueryBuilder() that allows

历史摘要 · 未重新核验 · GitHub Advisory

UTMStack before 11.2.16 contains a JPQL injection vulnerability that allows authenticated attackers to read arbitrary entity data by exploiting UtmNetworkScanService.searchPrope...

CVE-2026-82045

UTMStack before 11.2.16 contains a JPQL injection vulnerability that allows authenticated attackers to read arbitrary en

历史摘要 · 未重新核验 · NVD

UTMStack before 11.2.16 contains a SQL injection vulnerability in UtmAssetGroupService.searchQueryBuilder() that allows authenticated attackers to inject arbitrary SQL by supply...

CVE-2026-82039

UTMStack before 11.2.16 contains a SQL injection vulnerability in UtmAssetGroupService.searchQueryBuilder() that allows

历史摘要 · 未重新核验 · NVD

A security flaw has been discovered in CodeAstro Simple Loan Management System 1.0. Impacted is an unknown function of the file /admin/index.php. Performing a manipulation of th...

CVE-2026-104625

A security flaw has been discovered in CodeAstro Simple Loan Management System 1.0. Impacted is an unknown function of t

历史摘要 · 未重新核验 · NVD

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in GG Soft Software Services Inc. Paperwork allows SQL Injection. This issue ...

CVE-2026-85215

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in GG Soft Software S

历史摘要 · 未重新核验 · NVD