Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: cwe-89 Clear
ID Title
CVE-2026-76049 Vulnerability in sqli (CVE-2026-76049)
vulnerability in sqli (CVE-2026-76049). Risk of unauthorized operations or information disclosure.
CVE-2026-76048 Vulnerability in sqli (CVE-2026-76048)
vulnerability in sqli (CVE-2026-76048). Risk of unauthorized operations or information disclosure.
CVE-2026-75986 Vulnerability in sqli (CVE-2026-75986)
vulnerability in sqli (CVE-2026-75986). Risk of unauthorized operations or information disclosure.
CVE-2026-54348 SQL Injection in froxlor/froxlor (CVE-2026-54348)
SQL injection in froxlor/froxlor (CVE-2026-54348). Successful exploitation can lead to full system takeover. Exploitable via ``panel_admins.ip``. Mitigation: upgrade to `2.3.8` or later.
CVE-2026-75876 Vulnerability in sqli (CVE-2026-75876)
vulnerability in sqli (CVE-2026-75876). Risk of unauthorized operations or information disclosure.
CVE-2026-73392 Unauthenticated SQL Injection in Super Store Finder <= 7.8 versions.
Unauthenticated SQL Injection in Super Store Finder <= 7.8 versions.
CVE-2026-74015 Unauthenticated SQL Injection in Readabler < 2.0.18 versions.
Unauthenticated SQL Injection in Readabler < 2.0.18 versions.
CVE-2026-73355 Unauthenticated SQL Injection in Affiliates Manager <= 2.9.53 versions.
Unauthenticated SQL Injection in Affiliates Manager <= 2.9.53 versions.
CVE-2026-73339 Unauthenticated SQL Injection in Modern Events Calendar < 7.35.0 versions.
Unauthenticated SQL Injection in Modern Events Calendar < 7.35.0 versions.
CVE-2026-73345 Customer SQL Injection in License Manager for WooCommerce <= 3.0.18 versions.
Customer SQL Injection in License Manager for WooCommerce <= 3.0.18 versions.
CVE-2026-73365 Unauthenticated SQL Injection in JetAppointment <= 2.5.2 versions.
Unauthenticated SQL Injection in JetAppointment <= 2.5.2 versions.
CVE-2026-73187 Unauthenticated SQL Injection in Sticky Chat Widget <= 1.4.2 versions.
Unauthenticated SQL Injection in Sticky Chat Widget <= 1.4.2 versions.
CVE-2026-66622 Unauthenticated SQL Injection in Depicter Slider <= 4.8.0 versions.
Unauthenticated SQL Injection in Depicter Slider <= 4.8.0 versions.
CVE-2026-32466 Subscriber SQL Injection in Gravity Forms Bookings premium <= 2.1 versions.
Subscriber SQL Injection in Gravity Forms Bookings premium <= 2.1 versions.
CVE-2026-75778 Vulnerability in sqli (CVE-2026-75778)
vulnerability in sqli (CVE-2026-75778). Risk of unauthorized operations or information disclosure.
CVE-2026-75089 Vulnerability in sqli (CVE-2026-75089)
vulnerability in sqli (CVE-2026-75089). Risk of unauthorized operations or information disclosure.
CVE-2026-75088 Vulnerability in sqli (CVE-2026-75088)
vulnerability in sqli (CVE-2026-75088). Risk of unauthorized operations or information disclosure.
CVE-2026-75086 Vulnerability in sqli (CVE-2026-75086)
vulnerability in sqli (CVE-2026-75086). Risk of unauthorized operations or information disclosure.
CVE-2026-75087 Vulnerability in sqli (CVE-2026-75087)
vulnerability in sqli (CVE-2026-75087). Risk of unauthorized operations or information disclosure.
CVE-2026-75080 Vulnerability in sqli (CVE-2026-75080)
vulnerability in sqli (CVE-2026-75080). Risk of unauthorized operations or information disclosure.
CVE-2026-75079 Vulnerability in sqli (CVE-2026-75079)
vulnerability in sqli (CVE-2026-75079). Risk of unauthorized operations or information disclosure.
CVE-2026-67854 SQL Injection vulnerability in Qcms v.6.0.6 allows a remote attacker to execute arbitrary code
SQL Injection vulnerability in Qcms v.6.0.6 allows a remote attacker to execute arbitrary code
CVE-2026-67917 SQL Injection in sqli (CVE-2026-67917)
SQL injection in sqli (CVE-2026-67917). Successful exploitation can lead to full system takeover. Exploitable via ``db.sql``.
CVE-2026-65822 SQL Injection in CVE-2026-65822 (CVE-2026-65822)
SQL injection in CVE-2026-65822 (CVE-2026-65822). Confidential information can be exposed externally.
CVE-2026-64657 SQL Injection in CVE-2026-64657 (CVE-2026-64657)
SQL injection in CVE-2026-64657 (CVE-2026-64657). Successful exploitation can lead to full system takeover.
CVE-2026-75014 Vulnerability in sqli (CVE-2026-75014)
vulnerability in sqli (CVE-2026-75014). Risk of unauthorized operations or information disclosure.
CVE-2026-74254 SQL Injection in sqli (CVE-2026-74254)
SQL injection in sqli (CVE-2026-74254). Risk of unauthorized operations or information disclosure.
CVE-2026-51346 SQL Injection in sqli (CVE-2026-51346)
SQL injection in sqli (CVE-2026-51346). Confidential information can be exposed externally.
CVE-2026-50769 SQL Injection in sqli (CVE-2026-50769)
SQL injection in sqli (CVE-2026-50769). Successful exploitation can lead to full system takeover.
CVE-2026-20000 Vulnerability in sqli (CVE-2026-20000)
vulnerability in sqli (CVE-2026-20000). Risk of unauthorized operations or information disclosure.
CVE-2026-15623 SQL Injection in sqli (CVE-2026-15623)
SQL injection in sqli (CVE-2026-15623). Risk of unauthorized operations or information disclosure.
CVE-2026-19973 Vulnerability in sqli (CVE-2026-19973)
vulnerability in sqli (CVE-2026-19973). Risk of unauthorized operations or information disclosure.
CVE-2026-19972 Vulnerability in sqli (CVE-2026-19972)
vulnerability in sqli (CVE-2026-19972). Risk of unauthorized operations or information disclosure.
CVE-2026-74251 SQL Injection in sqli (CVE-2026-74251)
SQL injection in sqli (CVE-2026-74251). Risk of unauthorized operations or information disclosure.
CVE-2026-2497 SQL Injection in wordpress (CVE-2026-2497)
SQL injection in wordpress (CVE-2026-2497). Successful exploitation can lead to full system takeover.
CVE-2026-2283 SQL Injection in wordpress (CVE-2026-2283)
SQL injection in wordpress (CVE-2026-2283). Confidential information can be exposed externally.
CVE-2026-19934 Vulnerability in sqli (CVE-2026-19934)
vulnerability in sqli (CVE-2026-19934). Risk of unauthorized operations or information disclosure.
CVE-2026-18653 SQL Injection in wordpress (CVE-2026-18653)
SQL injection in wordpress (CVE-2026-18653). Successful exploitation can lead to full system takeover.
CVE-2026-9767 SQL Injection in wordpress (CVE-2026-9767)
SQL injection in wordpress (CVE-2026-9767). Confidential information can be exposed externally.
CVE-2026-17582 SQL Injection in wordpress (CVE-2026-17582)
SQL injection in wordpress (CVE-2026-17582). Confidential information can be exposed externally.
CVE-2026-15602 SQL Injection in wordpress (CVE-2026-15602)
SQL injection in wordpress (CVE-2026-15602). Confidential information can be exposed externally.
CVE-2026-15963 SQL Injection in wordpress (CVE-2026-15963)
SQL injection in wordpress (CVE-2026-15963). Confidential information can be exposed externally.
CVE-2026-15351 SQL Injection in wordpress (CVE-2026-15351)
SQL injection in wordpress (CVE-2026-15351). Confidential information can be exposed externally.
CVE-2026-16079 SQL Injection in wordpress (CVE-2026-16079)
SQL injection in wordpress (CVE-2026-16079). Confidential information can be exposed externally.
CVE-2026-19925 Vulnerability in sqli (CVE-2026-19925)
vulnerability in sqli (CVE-2026-19925). Risk of unauthorized operations or information disclosure.
CVE-2026-19926 Vulnerability in sqli (CVE-2026-19926)
vulnerability in sqli (CVE-2026-19926). Risk of unauthorized operations or information disclosure.
CVE-2026-19923 Vulnerability in sqli (CVE-2026-19923)
vulnerability in sqli (CVE-2026-19923). Risk of unauthorized operations or information disclosure.
CVE-2026-19919 Vulnerability in sqli (CVE-2026-19919)
vulnerability in sqli (CVE-2026-19919). Risk of unauthorized operations or information disclosure.
CVE-2026-19921 Vulnerability in sqli (CVE-2026-19921)
vulnerability in sqli (CVE-2026-19921). Risk of unauthorized operations or information disclosure.
CVE-2026-19920 Vulnerability in sqli (CVE-2026-19920)
vulnerability in sqli (CVE-2026-19920). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →