Subscriber SQL Injection in YITH WooCommerce Membership Premium <= 2.33.0 versions.
CVE-2026-32552
Subscriber SQL Injection in YITH WooCommerce Membership Premium <= 2.33.0 versions.
#cwe-89
共收录 2526 条相关情报。
← 返回所有主题The Product Shortlist WordPress plugin through 1.0.4 does not properly sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated attackers to ...
CVE-2026-16950
The Product Shortlist WordPress plugin through 1.0.4 does not properly sanitise and escape a parameter before using it i
The Dinatur WordPress plugin through 1.18 does not sanitize and escape user input before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks...
CVE-2026-12983
The Dinatur WordPress plugin through 1.18 does not sanitize and escape user input before using it in a SQL query, allowi
A vulnerability was found in SourceCodester Simple Online Food Ordering System 1.0. This impacts an unknown function of the file /admin/ajax.php?action=delete_menu. The manipula...
CVE-2026-76050
A vulnerability was found in SourceCodester Simple Online Food Ordering System 1.0. This impacts an unknown function of
A vulnerability has been found in SourceCodester Simple Online Food Ordering System 1.0. This affects an unknown function of the file /admin/ajax.php?action=save_menu. The manip...
CVE-2026-76049
A vulnerability has been found in SourceCodester Simple Online Food Ordering System 1.0. This affects an unknown functio
A flaw has been found in SourceCodester Simple Online Food Ordering System 1.0. The impacted element is an unknown function of the file /admin/ajax.php?action=login. Executing a...
CVE-2026-76048
A flaw has been found in SourceCodester Simple Online Food Ordering System 1.0. The impacted element is an unknown funct
Froxlor is open source server administration software. Prior to 2.3.8, the Admins.add and Admins.update endpoints in lib/Froxlor/Api/Commands/Admins.php accept an attacker-contr...
CVE-2026-54348
Froxlor is open source server administration software. Prior to 2.3.8, the Admins.add and Admins.update endpoints in lib
Froxlor: Second-Order SQL Injection via `Admins.add` `ipaddress` Parameter Allows Full Database Exfiltration
CVE-2026-54348
### Summary A second-order SQL injection vulnerability in Froxlor's admin API allows an authenticated administrator to
A security vulnerability has been detected in xianrendzw EasyReport up to 2.0.17.0522_Beta. Affected by this issue is some unknown functionality of the file ModuleController.jav...
CVE-2026-75876
A security vulnerability has been detected in xianrendzw EasyReport up to 2.0.17.0522_Beta. Affected by this issue is so
FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Prior to 1.3.2, the TDengine DAQ storage connector's escapeTdString function in server/runtime/storage/...
CVE-2026-47720
FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Prior to 1.3.2, the TDengine DAQ storage conne
Unauthenticated SQL Injection in Readabler < 2.0.18 versions.
CVE-2026-74015
Unauthenticated SQL Injection in Readabler < 2.0.18 versions.
Unauthenticated SQL Injection in Super Store Finder <= 7.8 versions.
CVE-2026-73392
Unauthenticated SQL Injection in Super Store Finder <= 7.8 versions.
Unauthenticated SQL Injection in JetAppointment <= 2.5.2 versions.
CVE-2026-73365
Unauthenticated SQL Injection in JetAppointment <= 2.5.2 versions.
Unauthenticated SQL Injection in Affiliates Manager <= 2.9.53 versions.
CVE-2026-73355
Unauthenticated SQL Injection in Affiliates Manager <= 2.9.53 versions.
Customer SQL Injection in License Manager for WooCommerce <= 3.0.18 versions.
CVE-2026-73345
Customer SQL Injection in License Manager for WooCommerce <= 3.0.18 versions.
Unauthenticated SQL Injection in Modern Events Calendar < 7.35.0 versions.
CVE-2026-73339
Unauthenticated SQL Injection in Modern Events Calendar < 7.35.0 versions.
Unauthenticated SQL Injection in Sticky Chat Widget <= 1.4.2 versions.
CVE-2026-73187
Unauthenticated SQL Injection in Sticky Chat Widget <= 1.4.2 versions.
Unauthenticated SQL Injection in Depicter Slider <= 4.8.0 versions.
CVE-2026-66622
Unauthenticated SQL Injection in Depicter Slider <= 4.8.0 versions.
Subscriber SQL Injection in Gravity Forms Bookings premium <= 2.1 versions.
CVE-2026-32466
Subscriber SQL Injection in Gravity Forms Bookings premium <= 2.1 versions.
A vulnerability was identified in code-projects Task Management System 1.0. This affects the function Operation::select_with_multiple_condition of the file /index.php of the com...
CVE-2026-75778
A vulnerability was identified in code-projects Task Management System 1.0. This affects the function Operation::select_