#cwe-89

共收录 2545 条相关情报。

漏洞预警2026-07-28 发布INFO

The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress is vulnerable to generic SQL Injection via the 'alldata[truebooker_user]' parameter in all version...

CVE-2026-13161

The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress is vulnerable to generic SQL Injection vi

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-07-28 发布INFO

The Premium Packages – Sell Digital Products Securely plugin for WordPress is vulnerable to SQL Injection via the 'code' parameter of the POST /wp-json/wpdmpp/v1/cart/coupon RES...

CVE-2026-12800

The Premium Packages – Sell Digital Products Securely plugin for WordPress is vulnerable to SQL Injection via the 'code'

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-07-28 发布INFO

The SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery plugin for WordPress is vulnerable to generic SQL Injection via 'checkout_payment_plans'...

CVE-2026-15673

The SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery plugin for WordPress is vulnera

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-07-28 发布INFO

The SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery plugin for WordPress is vulnerable to generic SQL Injection via the 'id' parameter in al...

CVE-2026-15671

The SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery plugin for WordPress is vulnera

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-07-28 发布INFO

The SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery plugin for WordPress is vulnerable to time-based SQL Injection via the 'orderby' paramet...

CVE-2026-15670

The SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery plugin for WordPress is vulnera

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-07-28 发布INFO

The WP Fast Total Search – The Power of Indexed Search plugin for WordPress is vulnerable to generic SQL Injection via the 'form_data[s]' parameter in all versions up to, and in...

CVE-2026-12741

The WP Fast Total Search – The Power of Indexed Search plugin for WordPress is vulnerable to generic SQL Injection via t

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-07-28 发布INFO

The Chaty Pro plugin for WordPress is vulnerable to Authenticated Time-Based Blind SQL Injection in versions up to and including 3.5.5. This is due to the fetch_custom_field() f...

CVE-2026-6251

The Chaty Pro plugin for WordPress is vulnerable to Authenticated Time-Based Blind SQL Injection in versions up to and i

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-07-28 发布INFO

The ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin plugin for WordPress is vulnerable to time-based SQL Injection via the 'orderby' parameter in all versi...

CVE-2026-16811

The ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin plugin for WordPress is vulnerable to time-bas

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-07-27 发布INFO

SQL injection vulnerability in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the sqlquery parameter of the sys_sql_query.php component

CVE-2026-51077

SQL injection vulnerability in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the sqlqu

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-07-27 发布INFO

An input validation vulnerability exists in an API component of the orchestrator. An authenticated user can exploit this flaw to manipulate backend queries, which may result in ...

CVE-2026-17191

An input validation vulnerability exists in an API component of the orchestrator. An authenticated user can exploit this

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-07-27 发布INFO

SQL injection vulnerability exists in the order_by parameter of the /customers/search endpoint in Alex Tselegidis EasyAppointments <= 1.5.1. The vulnerability arises from unsani...

CVE-2025-50455

SQL injection vulnerability exists in the order_by parameter of the /customers/search endpoint in Alex Tselegidis EasyAp

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-07-27 发布INFO

Administrator SQL Injection in WP Google Review Slider <= 18.4 versions.

CVE-2026-66427

Administrator SQL Injection in WP Google Review Slider <= 18.4 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-07-27 发布INFO

Subscriber SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 versions.

CVE-2026-59551

Subscriber SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-07-27 发布INFO

Unauthenticated SQL Injection in AWP Classifieds <= 4.4.7 versions.

CVE-2026-59550

Unauthenticated SQL Injection in AWP Classifieds <= 4.4.7 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-07-27 发布INFO

Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 versions.

CVE-2026-59549

Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-07-27 发布INFO

Unauthenticated SQL Injection in GamiPress <= 7.9.7 versions.

CVE-2026-59538

Unauthenticated SQL Injection in GamiPress <= 7.9.7 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-07-27 发布INFO

Administrator SQL Injection in Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce <= 2.10.22 versions.

CVE-2026-59537

Administrator SQL Injection in Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce <= 2.10.22 versio

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-07-27 发布INFO

Unauthenticated SQL Injection in Relevanssi Light <= 1.2.2 versions.

CVE-2026-59533

Unauthenticated SQL Injection in Relevanssi Light <= 1.2.2 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-07-27 发布INFO

Unauthenticated SQL Injection in MapSVG <= 8.14.0 versions.

CVE-2026-59527

Unauthenticated SQL Injection in MapSVG <= 8.14.0 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-07-27 发布INFO

Joomla Extension - joomshaper.com - Authenticated SQL injection in SP Page Builder < 6.7.1 - Improper validation of various parameters in the media manager search and date filt...

CVE-2026-65877

Joomla Extension - joomshaper.com - Authenticated SQL injection in SP Page Builder < 6.7.1 - Improper validation of var

历史摘要 · 未重新核验 · NVD

#cve #cwe-89