Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
CVE-2026-54813
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Brainstorm Force S
#cwe-89
共收录 2560 条相关情报。
← 返回所有主题Unauthenticated SQL Injection in GEO my WordPress <= 4.5.5 versions.
CVE-2026-52715
Unauthenticated SQL Injection in GEO my WordPress <= 4.5.5 versions.
Subscriber SQL Injection in Attendance Manager <= 0.6.2 versions.
CVE-2026-52712
Subscriber SQL Injection in Attendance Manager <= 0.6.2 versions.
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web / StellarWP The Events Calendar allows Blind SQL Injection. Thi...
CVE-2026-49772
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web / Stell
Subscriber SQL Injection in WP Sessions Time Monitoring Full Automatic <= 1.1.4 versions.
CVE-2026-39581
Subscriber SQL Injection in WP Sessions Time Monitoring Full Automatic <= 1.1.4 versions.
Unauthenticated SQL Injection in InPost Gallery <= 2.1.4.6 versions.
CVE-2026-39574
Unauthenticated SQL Injection in InPost Gallery <= 2.1.4.6 versions.
The WP Review Slider Pro plugin for WordPress is vulnerable to SQL Injection via the 'curselrevs[]' parameter of the wpfb_find_reviews AJAX action in versions up to, and includi...
CVE-2026-8444
The WP Review Slider Pro plugin for WordPress is vulnerable to SQL Injection via the 'curselrevs[]' parameter of the wpf
The WP Review Slider Pro plugin for WordPress is vulnerable to SQL Injection via the 'stypes' and 'slocations' parameters of the wppro_get_overall_chart_data AJAX action in vers...
CVE-2026-8443
The WP Review Slider Pro plugin for WordPress is vulnerable to SQL Injection via the 'stypes' and 'slocations' parameter
Unauthenticated SQL Injection in eCommerce Product Catalog <= 3.5.5 versions.
CVE-2026-52693
Unauthenticated SQL Injection in eCommerce Product Catalog <= 3.5.5 versions.
Unauthenticated SQL Injection in GPTranslate – Multilingual AI Translation for WordPress:...
CVE-2026-49776
Unauthenticated SQL Injection in GPTranslate – Multilingual AI Translation for WordPress: Automatically Translate Websit
Subscriber SQL Injection in Taskbuilder <= 5.0.7 versions.
CVE-2026-52697
Subscriber SQL Injection in Taskbuilder <= 5.0.7 versions.
Subscriber SQL Injection in WCMultiShipping <= 3.0.2 versions.
CVE-2026-52700
Subscriber SQL Injection in WCMultiShipping <= 3.0.2 versions.
Unauthenticated SQL Injection in Advanced 301 and 302 Redirect <= 1.6.9 versions.
CVE-2026-49067
Unauthenticated SQL Injection in Advanced 301 and 302 Redirect <= 1.6.9 versions.
Subscriber SQL Injection in ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.6 versions.
CVE-2026-48964
Subscriber SQL Injection in ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.6 versions.
Unauthenticated SQL Injection in JS Help Desk <= 3.0.9 versions.
CVE-2026-48886
Unauthenticated SQL Injection in JS Help Desk <= 3.0.9 versions.
Unauthenticated SQL Injection in Realtyna Organic IDX plugin <= 5.1.0 versions.
CVE-2026-45439
Unauthenticated SQL Injection in Realtyna Organic IDX plugin <= 5.1.0 versions.
Subscriber SQL Injection in GamiPress <= 7.8.7 versions.
CVE-2026-48874
Subscriber SQL Injection in GamiPress <= 7.8.7 versions.
Subscriber SQL Injection in WP Time Slots Booking Form <= 1.2.50 versions.
CVE-2026-48882
Subscriber SQL Injection in WP Time Slots Booking Form <= 1.2.50 versions.
Unauthenticated SQL Injection in WP Data Access <= 5.5.70 versions.
CVE-2026-42665
Unauthenticated SQL Injection in WP Data Access <= 5.5.70 versions.
Subscriber SQL Injection in WCMultiShipping <= 3.0.2 versions.
CVE-2026-52700
Subscriber SQL Injection in WCMultiShipping <= 3.0.2 versions.