Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: cwe-89 Clear
ID Title
CVE-2026-77586 SQL Injection in CVE-2026-77586 (CVE-2026-77586)
SQL injection in CVE-2026-77586 (CVE-2026-77586). Successful exploitation can lead to full system takeover.
CVE-2026-82227 Contributor SQL Injection in WPBulky <= 1.2.2 versions.
Contributor SQL Injection in WPBulky <= 1.2.2 versions.
CVE-2026-40018 None None None No publicly available exploits are known.
None None None No publicly available exploits are known.
CVE-2026-5097 SQL Injection in wordpress (CVE-2026-5097)
SQL injection in wordpress (CVE-2026-5097). Confidential information can be exposed externally.
CVE-2026-75417 SQL Injection in sqli (CVE-2026-75417)
SQL injection in sqli (CVE-2026-75417). Successful exploitation can lead to full system takeover.
CVE-2026-81728 SQL Injection in sqli (CVE-2026-81728)
SQL injection in sqli (CVE-2026-81728). Confidential information can be exposed externally.
CVE-2026-81277 Contributor SQL Injection in Suggestion Engine for WooCommerce <= 2.0.11 versions.
Contributor SQL Injection in Suggestion Engine for WooCommerce <= 2.0.11 versions.
CVE-2026-78285 Subscriber SQL Injection in Like Button Rating <= 2.6.61 versions.
Subscriber SQL Injection in Like Button Rating <= 2.6.61 versions.
CVE-2026-32564 Subscriber SQL Injection in ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.63 versions.
Subscriber SQL Injection in ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.63 versions.
CVE-2026-32550 Subscriber SQL Injection in Kadence Shop Kit <= 3.0.6 versions.
Subscriber SQL Injection in Kadence Shop Kit <= 3.0.6 versions.
CVE-2026-81203 Vulnerability in sqli (CVE-2026-81203)
vulnerability in sqli (CVE-2026-81203). Risk of unauthorized operations or information disclosure.
CVE-2026-80236 SQL Injection in sqli (CVE-2026-80236)
SQL injection in sqli (CVE-2026-80236). Confidential information can be exposed externally.
CVE-2026-18884 SQL Injection in wordpress (CVE-2026-18884)
SQL injection in wordpress (CVE-2026-18884). Confidential information can be exposed externally.
CVE-2026-79845 Vulnerability in sqli (CVE-2026-79845)
vulnerability in sqli (CVE-2026-79845). Risk of unauthorized operations or information disclosure.
CVE-2026-79804 Vulnerability in sqli (CVE-2026-79804)
vulnerability in sqli (CVE-2026-79804). Risk of unauthorized operations or information disclosure.
CVE-2026-75498 SQL Injection in CVE-2026-75498 (CVE-2026-75498)
SQL injection in CVE-2026-75498 (CVE-2026-75498). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `123c97c` or later.
CVE-2026-75497 SQL Injection in CVE-2026-75497 (CVE-2026-75497)
SQL injection in CVE-2026-75497 (CVE-2026-75497). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `123c97c` or later.
CVE-2026-19949 SQL Injection in wordpress (CVE-2026-19949)
SQL injection in wordpress (CVE-2026-19949). Successful exploitation can lead to full system takeover.
CVE-2026-78576 SQL Injection in wordpress (CVE-2026-78576)
SQL injection in wordpress (CVE-2026-78576). Confidential information can be exposed externally.
CVE-2026-78248 Vulnerability in sqli (CVE-2026-78248)
vulnerability in sqli (CVE-2026-78248). Risk of unauthorized operations or information disclosure.
CVE-2026-78247 Vulnerability in sqli (CVE-2026-78247)
vulnerability in sqli (CVE-2026-78247). Risk of unauthorized operations or information disclosure.
CVE-2026-76848 SQL Injection in CVE-2026-76848 (CVE-2026-76848)
SQL injection in CVE-2026-76848 (CVE-2026-76848). Confidential information can be exposed externally.
CVE-2026-78270 Author SQL Injection in FluentCRM Pro <= 3.1.12 versions.
Author SQL Injection in FluentCRM Pro <= 3.1.12 versions.
CVE-2026-32478 Subscriber SQL Injection in WP Project Manager Pro <= 4.0.1 versions.
Subscriber SQL Injection in WP Project Manager Pro <= 4.0.1 versions.
CVE-2026-32471 Subscriber SQL Injection in ProLancer Element <= 1.4.8 versions.
Subscriber SQL Injection in ProLancer Element <= 1.4.8 versions.
CVE-2026-78246 Vulnerability in sqli (CVE-2026-78246)
vulnerability in sqli (CVE-2026-78246). Risk of unauthorized operations or information disclosure.
CVE-2026-78244 Vulnerability in sqli (CVE-2026-78244)
vulnerability in sqli (CVE-2026-78244). Risk of unauthorized operations or information disclosure.
CVE-2026-78316 SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.
SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.
CVE-2026-78317 SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.
SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.
CVE-2026-78314 SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.
SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.
CVE-2026-78315 SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.
SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.
CVE-2026-78201 Vulnerability in sqli (CVE-2026-78201)
vulnerability in sqli (CVE-2026-78201). Risk of unauthorized operations or information disclosure.
CVE-2026-78197 Vulnerability in sqli (CVE-2026-78197)
vulnerability in sqli (CVE-2026-78197). Risk of unauthorized operations or information disclosure.
CVE-2026-78199 Vulnerability in sqli (CVE-2026-78199)
vulnerability in sqli (CVE-2026-78199). Risk of unauthorized operations or information disclosure.
CVE-2026-78198 Vulnerability in sqli (CVE-2026-78198)
vulnerability in sqli (CVE-2026-78198). Risk of unauthorized operations or information disclosure.
CVE-2026-78182 Vulnerability in sqli (CVE-2026-78182)
vulnerability in sqli (CVE-2026-78182). Risk of unauthorized operations or information disclosure.
CVE-2026-78171 Vulnerability in sqli (CVE-2026-78171)
vulnerability in sqli (CVE-2026-78171). Risk of unauthorized operations or information disclosure.
CVE-2026-78143 Vulnerability in sqli (CVE-2026-78143)
vulnerability in sqli (CVE-2026-78143). Risk of unauthorized operations or information disclosure.
CVE-2026-46682 SQL Injection in CVE-2026-46682 (CVE-2026-46682)
SQL injection in CVE-2026-46682 (CVE-2026-46682). Confidential information can be exposed externally.
CVE-2026-77020 Vulnerability in sqli (CVE-2026-77020)
vulnerability in sqli (CVE-2026-77020). Risk of unauthorized operations or information disclosure.
CVE-2026-77019 Vulnerability in sqli (CVE-2026-77019)
vulnerability in sqli (CVE-2026-77019). Risk of unauthorized operations or information disclosure.
CVE-2026-76998 Vulnerability in sqli (CVE-2026-76998)
vulnerability in sqli (CVE-2026-76998). Risk of unauthorized operations or information disclosure.
CVE-2026-76996 Vulnerability in sqli (CVE-2026-76996)
vulnerability in sqli (CVE-2026-76996). Risk of unauthorized operations or information disclosure.
CVE-2026-76990 Vulnerability in sqli (CVE-2026-76990)
vulnerability in sqli (CVE-2026-76990). Risk of unauthorized operations or information disclosure.
CVE-2026-76635 SQL Injection in sqli (CVE-2026-76635)
SQL injection in sqli (CVE-2026-76635). Successful exploitation can lead to full system takeover.
CVE-2026-74011 SQL Injection in sqli (CVE-2026-74011)
SQL injection in sqli (CVE-2026-74011). Confidential information can be exposed externally.
CVE-2026-73998 Subscriber SQL Injection in WP w3all phpBB <= 3.0.5 versions.
Subscriber SQL Injection in WP w3all phpBB <= 3.0.5 versions.
CVE-2026-74013 Subscriber SQL Injection in eShipper Commerce <= 2.16.13 versions.
Subscriber SQL Injection in eShipper Commerce <= 2.16.13 versions.
CVE-2026-66594 Subscriber SQL Injection in WordPress Persistent Login <= 3.1.0 versions.
Subscriber SQL Injection in WordPress Persistent Login <= 3.1.0 versions.
CVE-2026-76783 Vulnerability in sqli (CVE-2026-76783)
vulnerability in sqli (CVE-2026-76783). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →