Contributor SQL Injection in Suggestion Engine for WooCommerce <= 2.0.11 versions.
CVE-2026-81277
Contributor SQL Injection in Suggestion Engine for WooCommerce <= 2.0.11 versions.
#cwe-89
共收录 2526 条相关情报。
← 返回所有主题Unauthenticated SQL Injection in Beautiful Taxonomy Filters <= 2.4.6 versions.
CVE-2026-78288
Unauthenticated SQL Injection in Beautiful Taxonomy Filters <= 2.4.6 versions.
Subscriber SQL Injection in Like Button Rating <= 2.6.61 versions.
CVE-2026-78285
Subscriber SQL Injection in Like Button Rating <= 2.6.61 versions.
Subscriber SQL Injection in ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.63 versions.
CVE-2026-32564
Subscriber SQL Injection in ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.63 versions.
Subscriber SQL Injection in Kadence Shop Kit <= 3.0.6 versions.
CVE-2026-32550
Subscriber SQL Injection in Kadence Shop Kit <= 3.0.6 versions.
The WooCommerce Lottery plugin for WordPress is vulnerable to Time-Based SQL Injection via 'orderby' and 'order' GET Parameters in all versions up to, and including, 2.2.9 due t...
CVE-2026-18884
CVE-2026-18884涉及WordPress的WooCommerce Lottery插件，该插件用于管理彩票/抽奖活动，影响版本为2.2.9及之前全部版本。漏洞类型为基于时间的SQL注入（Time-Based SQL Injectio
The Tutor LMS WordPress plugin before 4.0.6 does not validate values used to build a database query, and does not restrict which template file a request may load, allowing unau...
CVE-2026-19094
The Tutor LMS WordPress plugin before 4.0.6 does not validate values used to build a database query, and does not restr
A vulnerability was identified in code-projects Simple Inventory System 1.0. This vulnerability affects unknown code of the file /InventoryManagement/edit.php. The manipulation ...
CVE-2026-79845
A vulnerability was identified in code-projects Simple Inventory System 1.0. This vulnerability affects unknown code of
A vulnerability was found in SililaWijesinghe Food Ordering System up to ba314e897e3365600461e5ea59432e39ceaa0fa5. Affected by this issue is some unknown functionality of the fi...
CVE-2026-79804
A vulnerability was found in SililaWijesinghe Food Ordering System up to ba314e897e3365600461e5ea59432e39ceaa0fa5. Affec
The FluentCRM Pro – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution plugin for WordPress is vulnerable to SQL Injection in all ve...
CVE-2026-78468
The FluentCRM Pro – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution plug
Webkul QloApps does not validate request parameters before a database query. A remote, authenticated attacker with administrative privileges could send a crafted SQL query to th...
CVE-2026-75498
Webkul QloApps does not validate request parameters before a database query. A remote, authenticated attacker with admin
Webkul QloApps does not validate request parameters before a database query. A remote, authenticated attacker with administrative privileges could send a crafted SQL query to th...
CVE-2026-75497
Webkul QloApps does not validate request parameters before a database query. A remote, authenticated attacker with admin
A vulnerability was determined in liketrek TREK up to 3.0.22. The affected element is the function journeyService.updateEntry of the file server/src/nest/journey/journey.control...
CVE-2026-78864
A vulnerability was determined in liketrek TREK up to 3.0.22. The affected element is the function journeyService.update
The Media Sweep – WordPress Media Cleaner plugin for WordPress is vulnerable to generic SQL Injection via the 'fields' parameter in all versions up to, and including, 1.1.3 due ...
CVE-2026-77824
The Media Sweep – WordPress Media Cleaner plugin for WordPress is vulnerable to generic SQL Injection via the 'fields' p
The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to SQL Injection via archive restore functionality in all versions up to, and including, 7.109 due to i...
CVE-2026-19949
The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to SQL Injection via archive restore functiona
The Readabler plugin for WordPress is vulnerable to SQL Injection in all versions up to 2.0.18 (exclusive) due to insufficient escaping on the user supplied parameter and lack o...
CVE-2026-78576
The Readabler plugin for WordPress is vulnerable to SQL Injection in all versions up to 2.0.18 (exclusive) due to insuff
The Total Donations plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 2.0.5 due to insufficient escaping on the user supplied parameter a...
CVE-2026-78568
The Total Donations plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 2.0.5 due
The extension fails to properly sanitize user input before using it in a database query. As a result, a low-privileged backend user can inject arbitrary SQL through a URL parame...
CVE-2026-77137
The extension fails to properly sanitize user input before using it in a database query. As a result, a low-privileged b
A vulnerability was found in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/cust_del.php. The manipulation of the argument ID re...
CVE-2026-78656
A vulnerability was found in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /p
The WP Project Manager Pro plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 4.0.1 due to insufficient escaping on the user supplied para...
CVE-2026-78470
The WP Project Manager Pro plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 4.0