Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
CVE-2026-54808
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Travel WP Trave
#severity:critical
共收录 1443 条相关情报。
← 返回所有主题Unauthenticated PHP Object Injection in Moderno < 1.43 versions.
CVE-2026-49108
Unauthenticated PHP Object Injection in Moderno < 1.43 versions.
Rclone: Unauthenticated command execution in `rclone rcd --rc-serve` via inline remote instantiation, bypassing CVE-2026-41179 fix
CVE-2026-49980
## Summary `rclone rcd --rc-serve` accepts unauthenticated `GET` and `HEAD` requests to paths of the form: ```text /[r
LiteLLM: Authentication Bypass via Host Header Injection
CVE-2026-49468
### Impact A Host-header parsing flaw in the LiteLLM proxy could, under specific conditions, allow unauthenticated acce
The device has a webserver that exposes a REST API authenticated with a token on the management...
CVE-2026-22313
The device has a webserver that exposes a REST API authenticated with a token on the management network. By exploiting a
Unauthenticated SQL Injection in eCommerce Product Catalog <= 3.5.5 versions.
CVE-2026-52693
Unauthenticated SQL Injection in eCommerce Product Catalog <= 3.5.5 versions.
Unauthenticated PHP Object Injection in wpForo Forum <= 3.1.0 versions.
CVE-2026-49769
Unauthenticated PHP Object Injection in wpForo Forum <= 3.1.0 versions.
Unauthenticated PHP Object Injection in OttoKit <= 1.1.27 versions.
CVE-2026-49781
Unauthenticated PHP Object Injection in OttoKit <= 1.1.27 versions.
Subscriber Arbitrary File Deletion in WP User Manager <= 2.9.16 versions.
CVE-2026-49766
Subscriber Arbitrary File Deletion in WP User Manager <= 2.9.16 versions.
Unauthenticated PHP Object Injection in WP Travel Engine <= 6.7.12 versions.
CVE-2026-49770
Unauthenticated PHP Object Injection in WP Travel Engine <= 6.7.12 versions.
Unauthenticated PHP Object Injection in Integration for ActiveCampaign and Contact Form 7,...
CVE-2026-9691
Unauthenticated PHP Object Injection in Integration for ActiveCampaign and Contact Form 7, WPForms, Elementor, Ninja For
Unauthenticated PHP Object Injection in Happyforms <= 1.26.13 versions.
CVE-2026-49768
Unauthenticated PHP Object Injection in Happyforms <= 1.26.13 versions.
Unauthenticated Path Traversal in FastDup <= 2.7.2 versions.
CVE-2026-52703
Unauthenticated Path Traversal in FastDup <= 2.7.2 versions.
Unauthenticated PHP Object Injection in Integration for Mailchimp and Contact Form 7, WPForms,...
CVE-2026-49765
Unauthenticated PHP Object Injection in Integration for Mailchimp and Contact Form 7, WPForms, Elementor, Ninja Forms <=
Unauthenticated SQL Injection in GPTranslate – Multilingual AI Translation for WordPress:...
CVE-2026-49776
Unauthenticated SQL Injection in GPTranslate – Multilingual AI Translation for WordPress: Automatically Translate Websit
Unauthenticated PHP Object Injection in WP Insightly for Contact Form 7, WPForms, Elementor,...
CVE-2026-49085
Unauthenticated PHP Object Injection in WP Insightly for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms
Unauthenticated PHP Object Injection in WP Zendesk for Contact Form 7, WPForms, Elementor,...
CVE-2026-49105
Unauthenticated PHP Object Injection in WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms <=
Unauthenticated PHP Object Injection in Integration for Keap/infusionsoft and Contact Form 7,...
CVE-2026-49104
Unauthenticated PHP Object Injection in Integration for Keap/infusionsoft and Contact Form 7, WPForms, Elementor, Formid
Unauthenticated PHP Object Injection in Integration for Contact Form 7 and Constant Contact <= 1...
CVE-2026-49106
Unauthenticated PHP Object Injection in Integration for Contact Form 7 and Constant Contact <= 1.1.6 versions.
Unauthenticated PHP Object Injection in Integration for Contact Form 7 HubSpot <= 1.3.7 versions.
CVE-2026-49763
Unauthenticated PHP Object Injection in Integration for Contact Form 7 HubSpot <= 1.3.7 versions.