The Create plugin for WordPress is vulnerable to generic SQL Injection via the 'order' parameter...
CVE-2026-13200
The Create plugin for WordPress is vulnerable to generic SQL Injection via the 'order' parameter in all versions up to,
#cwe-89
共收录 2526 条相关情报。
← 返回所有主题The VikRentItems Flexible Rental Management System WordPress plugin before 1.2.4 does not...
CVE-2026-88926
The VikRentItems Flexible Rental Management System WordPress plugin before 1.2.4 does not sanitise and escape some of it
The Custom Field Template plugin for WordPress is vulnerable to generic SQL Injection via the 'post_ID' parameter in all versions up to, and including, 2.7.8 due to insufficient...
CVE-2026-9855
The Custom Field Template plugin for WordPress is vulnerable to generic SQL Injection via the 'post_ID' parameter in all
The GoPay for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'log_table_filter' parameter in all versions up to, and including, 1.0.36 due to in...
CVE-2026-75959
The GoPay for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'log_table_filter' paramet
The WP Optimizer plugin for WordPress is vulnerable to SQL Injection via the 's' parameter in all versions up to and including 2.5.0. This is due to an unsafe subquery-detection...
CVE-2026-6295
The WP Optimizer plugin for WordPress is vulnerable to SQL Injection via the 's' parameter in all versions up to and inc
The Create plugin for WordPress is vulnerable to generic SQL Injection via the 'order' parameter in all versions up to, and including, 2.5.3 due to insufficient escaping on the ...
CVE-2026-13200
The Create plugin for WordPress is vulnerable to generic SQL Injection via the 'order' parameter in all versions up to,
The Create plugin for WordPress is vulnerable to generic SQL Injection via the 'order_by' parameter in all versions up to, and including, 2.5.3 due to insufficient escaping on t...
CVE-2026-13191
The Create plugin for WordPress is vulnerable to generic SQL Injection via the 'order_by' parameter in all versions up t
The VikRentItems Flexible Rental Management System WordPress plugin before 1.2.4 does not sanitise and escape some of its parameters before using them in SQL statements, allowin...
CVE-2026-88926
The VikRentItems Flexible Rental Management System WordPress plugin before 1.2.4 does not sanitise and escape some of it
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to obtain sensitive...
CVE-2026-84105
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to obtain sensitive information due to imp
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to obtain sensitive...
CVE-2026-84239
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to obtain sensitive information due to imp
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute...
CVE-2026-84064
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to i
IBM Guardium Data Protection 12.2 is vulnerable to an unauthenticated second-order SQL injection...
CVE-2026-80441
IBM Guardium Data Protection 12.2 is vulnerable to an unauthenticated second-order SQL injection vulnerability in the ge
IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary SQL commands...
CVE-2026-84082
IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary SQL commands due to improper neutra
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute...
CVE-2026-84073
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to i
IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the New Query...
CVE-2026-81656
IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the New Query Builder REST Processor
IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the Analytic...
CVE-2026-81933
IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the Analytic Grid Service Handler. A
IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the Load...
CVE-2026-81626
IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the Load Balancer Groups component.
IBM Platform RTM is vulnerable to SQL injection. A remote attacker could send specially crafted...
CVE-2026-17619
IBM Platform RTM is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which co
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper neutralization of special elements used in an SQL c...
CVE-2026-84239
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to obtain sensitive information due to imp
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper neutralization of special elements used in an SQL c...
CVE-2026-84105
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to obtain sensitive information due to imp