Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-77586 |
|
SQL Injection in CVE-2026-77586 (CVE-2026-77586)
SQL injection in CVE-2026-77586 (CVE-2026-77586). Successful exploitation can lead to full system takeover.
|
| CVE-2026-82227 |
|
Contributor SQL Injection in WPBulky <= 1.2.2 versions.
Contributor SQL Injection in WPBulky <= 1.2.2 versions.
|
| CVE-2026-40018 |
|
None None None No publicly available exploits are known.
None None None No publicly available exploits are known.
|
| CVE-2026-5097 |
|
SQL Injection in wordpress (CVE-2026-5097)
SQL injection in wordpress (CVE-2026-5097). Confidential information can be exposed externally.
|
| CVE-2026-75417 |
|
SQL Injection in sqli (CVE-2026-75417)
SQL injection in sqli (CVE-2026-75417). Successful exploitation can lead to full system takeover.
|
| CVE-2026-81728 |
|
SQL Injection in sqli (CVE-2026-81728)
SQL injection in sqli (CVE-2026-81728). Confidential information can be exposed externally.
|
| CVE-2026-81277 |
|
Contributor SQL Injection in Suggestion Engine for WooCommerce <= 2.0.11 versions.
Contributor SQL Injection in Suggestion Engine for WooCommerce <= 2.0.11 versions.
|
| CVE-2026-78285 |
|
Subscriber SQL Injection in Like Button Rating <= 2.6.61 versions.
Subscriber SQL Injection in Like Button Rating <= 2.6.61 versions.
|
| CVE-2026-32564 |
|
Subscriber SQL Injection in ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.63 versions.
Subscriber SQL Injection in ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.63 versions.
|
| CVE-2026-32550 |
|
Subscriber SQL Injection in Kadence Shop Kit <= 3.0.6 versions.
Subscriber SQL Injection in Kadence Shop Kit <= 3.0.6 versions.
|
| CVE-2026-81203 |
|
Vulnerability in sqli (CVE-2026-81203)
vulnerability in sqli (CVE-2026-81203). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-80236 |
|
SQL Injection in sqli (CVE-2026-80236)
SQL injection in sqli (CVE-2026-80236). Confidential information can be exposed externally.
|
| CVE-2026-18884 |
|
SQL Injection in wordpress (CVE-2026-18884)
SQL injection in wordpress (CVE-2026-18884). Confidential information can be exposed externally.
|
| CVE-2026-79845 |
|
Vulnerability in sqli (CVE-2026-79845)
vulnerability in sqli (CVE-2026-79845). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-79804 |
|
Vulnerability in sqli (CVE-2026-79804)
vulnerability in sqli (CVE-2026-79804). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75498 |
|
SQL Injection in CVE-2026-75498 (CVE-2026-75498)
SQL injection in CVE-2026-75498 (CVE-2026-75498). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `123c97c` or later.
|
| CVE-2026-75497 |
|
SQL Injection in CVE-2026-75497 (CVE-2026-75497)
SQL injection in CVE-2026-75497 (CVE-2026-75497). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `123c97c` or later.
|
| CVE-2026-19949 |
|
SQL Injection in wordpress (CVE-2026-19949)
SQL injection in wordpress (CVE-2026-19949). Successful exploitation can lead to full system takeover.
|
| CVE-2026-78576 |
|
SQL Injection in wordpress (CVE-2026-78576)
SQL injection in wordpress (CVE-2026-78576). Confidential information can be exposed externally.
|
| CVE-2026-78248 |
|
Vulnerability in sqli (CVE-2026-78248)
vulnerability in sqli (CVE-2026-78248). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-78247 |
|
Vulnerability in sqli (CVE-2026-78247)
vulnerability in sqli (CVE-2026-78247). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-76848 |
|
SQL Injection in CVE-2026-76848 (CVE-2026-76848)
SQL injection in CVE-2026-76848 (CVE-2026-76848). Confidential information can be exposed externally.
|
| CVE-2026-78270 |
|
Author SQL Injection in FluentCRM Pro <= 3.1.12 versions.
Author SQL Injection in FluentCRM Pro <= 3.1.12 versions.
|
| CVE-2026-32478 |
|
Subscriber SQL Injection in WP Project Manager Pro <= 4.0.1 versions.
Subscriber SQL Injection in WP Project Manager Pro <= 4.0.1 versions.
|
| CVE-2026-32471 |
|
Subscriber SQL Injection in ProLancer Element <= 1.4.8 versions.
Subscriber SQL Injection in ProLancer Element <= 1.4.8 versions.
|
| CVE-2026-78246 |
|
Vulnerability in sqli (CVE-2026-78246)
vulnerability in sqli (CVE-2026-78246). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-78244 |
|
Vulnerability in sqli (CVE-2026-78244)
vulnerability in sqli (CVE-2026-78244). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-78316 |
|
SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to
remote code execution.
SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to
remote code execution.
|
| CVE-2026-78317 |
|
SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to
remote code execution.
SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to
remote code execution.
|
| CVE-2026-78314 |
|
SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to
remote code execution.
SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to
remote code execution.
|
| CVE-2026-78315 |
|
SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to
remote code execution.
SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to
remote code execution.
|
| CVE-2026-78201 |
|
Vulnerability in sqli (CVE-2026-78201)
vulnerability in sqli (CVE-2026-78201). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-78197 |
|
Vulnerability in sqli (CVE-2026-78197)
vulnerability in sqli (CVE-2026-78197). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-78199 |
|
Vulnerability in sqli (CVE-2026-78199)
vulnerability in sqli (CVE-2026-78199). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-78198 |
|
Vulnerability in sqli (CVE-2026-78198)
vulnerability in sqli (CVE-2026-78198). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-78182 |
|
Vulnerability in sqli (CVE-2026-78182)
vulnerability in sqli (CVE-2026-78182). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-78171 |
|
Vulnerability in sqli (CVE-2026-78171)
vulnerability in sqli (CVE-2026-78171). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-78143 |
|
Vulnerability in sqli (CVE-2026-78143)
vulnerability in sqli (CVE-2026-78143). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-46682 |
|
SQL Injection in CVE-2026-46682 (CVE-2026-46682)
SQL injection in CVE-2026-46682 (CVE-2026-46682). Confidential information can be exposed externally.
|
| CVE-2026-77020 |
|
Vulnerability in sqli (CVE-2026-77020)
vulnerability in sqli (CVE-2026-77020). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-77019 |
|
Vulnerability in sqli (CVE-2026-77019)
vulnerability in sqli (CVE-2026-77019). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-76998 |
|
Vulnerability in sqli (CVE-2026-76998)
vulnerability in sqli (CVE-2026-76998). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-76996 |
|
Vulnerability in sqli (CVE-2026-76996)
vulnerability in sqli (CVE-2026-76996). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-76990 |
|
Vulnerability in sqli (CVE-2026-76990)
vulnerability in sqli (CVE-2026-76990). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-76635 |
|
SQL Injection in sqli (CVE-2026-76635)
SQL injection in sqli (CVE-2026-76635). Successful exploitation can lead to full system takeover.
|
| CVE-2026-74011 |
|
SQL Injection in sqli (CVE-2026-74011)
SQL injection in sqli (CVE-2026-74011). Confidential information can be exposed externally.
|
| CVE-2026-73998 |
|
Subscriber SQL Injection in WP w3all phpBB <= 3.0.5 versions.
Subscriber SQL Injection in WP w3all phpBB <= 3.0.5 versions.
|
| CVE-2026-74013 |
|
Subscriber SQL Injection in eShipper Commerce <= 2.16.13 versions.
Subscriber SQL Injection in eShipper Commerce <= 2.16.13 versions.
|
| CVE-2026-66594 |
|
Subscriber SQL Injection in WordPress Persistent Login <= 3.1.0 versions.
Subscriber SQL Injection in WordPress Persistent Login <= 3.1.0 versions.
|
| CVE-2026-76783 |
|
Vulnerability in sqli (CVE-2026-76783)
vulnerability in sqli (CVE-2026-76783). Risk of unauthorized operations or information disclosure.
|