SQL injection.

Catalyst Connect Zoho CRM Client Portal <= 2.2.0 - Authenticated (Administrator+) SQL Injection via uid Parameter

• catalyst2020 Catalyst Connect Zoho CRM Client Portal
• SQL injection

Booking Package <= 1.7.20 - Unauthenticated SQL Injection via 'email' Form Parameter

• masaakitanaka Booking Package
• SQL injection

KiviCare <= 4.5.0 - Authenticated (Doctor+) SQL Injection via 'orderby' Parameter in KCQueryBuilder

• iqonicdesign KiviCare – Clinic & Patient Management System (EHR)
• SQL injection

Majestic Support <= 1.1.9 - Authenticated (Subscriber+) SQL Injection via 'val' Parameter

• ahmadmj Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin
• SQL injection

KiviCare <= 4.5.0 - Authenticated (Doctor+) SQL Injection via 'orderby' Parameter in DoctorSessionController

• iqonicdesign KiviCare – Clinic & Patient Management System (EHR)
• SQL injection

Location Selector - Critical - SQL Injection - SA-CONTRIB-2026-072

• Drupal Location Selector
• SQL injection

Geolocation Field - Critical - SQL Injection - SA-CONTRIB-2026-062

• Drupal Geolocation Field
• SQL injection

Frappe: check_safe_sql_query Permits SELECT INTO OUTFILE

• frappe
• SQL injection

OpenReplay: Authenticated ClickHouse SQL injection via session search

• openreplay
• SQL injection

GLPI DataInjection Plugin Authenticated SQL Injection via CSV Import

• pluginsGLPI datainjection
• SQL injection

Dify < 1.16.0-rc1 SQL Injection via MyScale Vector Store search_by_full_text

• langgenius dify
• SQL injection

SQLi in Semtek Informatics' SEM-PMP

• Semtek Informatics Software Consulting Trade Ltd. Co. SEM-PMP
• SQL injection

Coturn: SQL Injection in HTTPS Admin Panel Delete Operations

• coturn
• SQL injection

SQLi in AdamPOS' MobilMen 20T

• Adam Retail Automation Ltd. MobilMen 20T
• SQL injection

grav-plugin-database: SQL Injection in PDO::tableExists() due to Unsanitized Table Name Interpolation

• grav
• SQL injection

SQL injection in Dell PowerFlex Manager

• Dell PowerFlex Manager
• SQL injection

SQL injection in Dell PowerFlex Manager

• Dell PowerFlex Manager
• SQL injection

SQL injection via unescaped dollar-quote in Postgrex.Notifications reconnect replay causes notification denial of service

• SQL injection

>=0.16.0, <0.22.3 · fixed in 0.22.3

Mail Mint <= 1.24.1 - Authenticated (Administrator+) SQL Injection via 'recipients' Parameter

• getwpfunnels Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails
• SQL injection

JoomSport <= 5.7.9 - Authenticated (Contributor+) SQL Injection via 'event' Shortcode Attribute

• beardev JoomSport – for Sports: Team & League, Football, Hockey & more
• SQL injection

Cookie Banner for GDPR / CCPA <= 4.3.6 - Authenticated (Administrator+) SQL Injection via 'scan_id' Parameter

• wplegalpages Cookie Banner for GDPR / CCPA – WPLP Cookie Consent
• SQL injection

BetterDocs <= 4.6.0 - Authenticated (Custom+) SQL Injection via 'lang' Parameter

• wpdevteam BetterDocs – AI Documentation, Knowledge Base, Docs, Wikis, FAQ with Chatbot
• SQL injection

GEO my WP <= 4.5.4 - Unauthenticated SQL Injection via 'distance' / 'lat' / 'lng' Parameters

• ninjew GEO my WP
• SQL injection

Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin <= 2.10.1 - Unauthenticated Blind SQL Injection

• ultimatemember Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
• SQL injection

Booking calendar, Appointment Booking System <= 3.2.17 - Unauthenticated Time-Based SQL Injection via 'wpdevart_id'

• wpdevart Booking calendar, Appointment Booking System
• SQL injection

rtMedia for WordPress, BuddyPress and bbPress <= 4.6.18 - Authenticated (Subscriber+) SQL Injection

• rtcamp rtMedia for WordPress, BuddyPress and bbPress
• SQL injection

YesWiki has Authenticated SQL Injection via ReactionManager

• SQL injection

<4.6.6 · fixed in 4.6.6

YesWiki: Second-Order SQL Injection in Page Delete API via Unescaped Page Tag (`ApiController::deletePage`)

• SQL injection

>=4.2.0, <4.6.6 · fixed in 4.6.6

YesWiki: SQL Injection possible through public Bazar entry-listing APIs via numeric `query`/`queries` filters

• SQL injection

<4.6.6 · fixed in 4.6.6

YesWiki: SQL injection via the `recentchanges` action `period` argument leads to arbitrary DB read

• SQL injection
• CWE-1287

<4.6.6 · fixed in 4.6.6

SourceCodester Simple and Nice Shopping Cart Script login.php sql injection

• SourceCodester Simple and Nice Shopping Cart Script
• Other injection
• SQL injection

Joomla Extension - acymailing.com - SQL Injection in AcyMailing extension < 10.11.1

• Datasolution acymailing.com AcyMailing extension for Joomla
• SQL injection

SQL Injection in SOPlanning Audit Retention Configuration

• SOPlanning
• SQL injection

SQLi in Inrove Software's BiEticaret

• Inrove Software and Internet Services BiEticaret
• SQL injection

Mail Mint <= 1.24.2 - Authenticated (Administrator+) SQL Injection via 'contact_ids' Parameter

• getwpfunnels Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails
• SQL injection

ERP: Complete HR, Accounting & CRM Suite with Recruitment and WooCommerce CRM Support <= 1.17.5 - Authenticated (HR Manager+) SQL Injection via 'orderby' Parameter

• wedevs ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce
• SQL injection

code-projects Interview Management System View.php sql injection

• code-projects Interview Management System
• Other injection
• SQL injection

code-projects Online Food Order System edit_food_items.php sql injection

• code-projects Online Food Order System
• Other injection
• SQL injection

CodeAstro Simple Online Leave Management System index.php sql injection

• CodeAstro Simple Online Leave Management System
• Other injection
• SQL injection

Duplicate Advisory: MySQL v1 Node executeQuery Operation Allows SQL Injection via Unparameterized Expression Interpolation

• SQL injection

* · no fixed version yet

IBM API Connect SQL Injection

• IBM API Connect
• SQL injection

Multiple Security Vulnerabilities in Terraform Provider for Snowflake Could Allow Privilege Escalation and Unauthorized Snowflake Account Takeover

• Terraform Provider for Snowflake
• SQL injection

SQL Injection in Snowflake Snowpark Python SDK

• Snowflake Snowpark Python SDK
• SQL injection

SQLi in Webbeyaz's Mediküm Web

• Webbeyaz Web Design Mediküm Web
• SQL injection

My Calendar <= 3.7.8 - Unauthenticated SQL Injection via 'mc_auth' and 'mc_host' Parameters

• joedolson My Calendar – Accessible Event Manager
• SQL injection

Recurio <= 1.1.3 - Authenticated (Shop Manager+) SQL Injection via 'data' Parameter

• devitemsllc Recurio – Ultimate Subscription for WooCommerce
• SQL injection

Tainacan <= 1.0.3 - Unauthenticated SQL Injection via 'geoquery' REST API Parameter

• Tainacan
• SQL injection

Eventer <= 4.4.2 - Unauthenticated SQL Injection via 'code' Parameter

• joe007 Eventer
• SQL injection

A SQL injection vulnerability in SOGo before 5.12.7 allows authenticated users to execute arbitrary SQL statements via the newPassword parameter in the password change functionality.

• SQL injection

A SQL injection vulnerability in SOGo before 5.12.7 allows authenticated users to execute arbitrary SQL statements via the search parameter of the allContactSearch endpoint.

• SQL injection

KEDA has PostgreSQL connection string parameter injection via incomplete whitespace escaping

• Other injection
• SQL injection

<2.20.0 · fixed in 2.20.0

DataEase: Authenticated SQL Injection in Chart Quota Filters

• dataease
• SQL injection

OpenRemote has Authenticated SQL Injection via Datapoint Crosstab Export

• SQL injection

<1.26.0 · fixed in 1.26.0

FOSSBilling has improper SQL neutralization in `Massmailer` recipient filters

• FOSSBilling
• SQL injection

Langroid: SQLChatAgent dangerous-function blocklist can be bypassed with quoted or schema-qualified pg_read_file calls

• Path traversal
• SQL injection

<0.65.1 · fixed in 0.65.1

Authenticated SQL injection in the metrics-service retention policy subsystem of mcp-gateway-registry

• AWS MCP Gateway & Registry
• SQL injection

PROG MIS｜Prog Management System - SQL Injection

• PROG MIS Prog Management System
• SQL injection

CodeAstro Ecommerce Website my_account.php sql injection

• CodeAstro Ecommerce Website
• Other injection
• SQL injection

CodeAstro Apartment Visitor Management System visitor-entry.php sql injection

• CodeAstro Apartment Visitor Management System
• Other injection
• SQL injection

CodeAstro Apartment Visitor Management System edit-apartment.php sql injection

• CodeAstro Apartment Visitor Management System
• Other injection
• SQL injection