SQL injection.

All-in-One WP Migration and Backup <= 7.109 - Unauthenticated Second-Order SQL Injection via Archive Restore to Remote Code Execution

• servmask All-in-One WP Migration and Backup
• SQL injection

TYPO3-EXT-SA-2026-027: SQL Injection in extension "Forms Export" (frp_form_answers)

• SQL injection

<5.0.5 || >=6.0.0, <6.1.3 || >=7.0.0, <7.1.1 · fixed in 5.0.5, 6.1.3, 7.1.1

itsourcecode Sales and Inventory System cust_del.php sql injection

• itsourcecode Sales and Inventory System
• Other injection
• SQL injection

WP Project Manager Pro <= 4.0.1 - Authenticated (Subscriber+) SQL Injection

• wedevs WP Project Manager Pro
• SQL injection

Events Manager <= 7.4.0 - Authenticated (Contributor+) SQL Injection via 'meta_key' Parameter in Event/Location Duplicate Action

• netweblogic Events Manager – Calendar, Bookings, Tickets, and more!
• SQL injection

A SQL injection vulnerability in the country-code lookup endpoint in GazellePW (GazellePosterWall) commit 86c4bedf727691b5a97af42a4864869d18446449 allows remote authenticated users with users_view_ip…

• SQL injection

A SQL injection vulnerability in the tags manager in GazellePW (GazellePosterWall) commit 86c4bedf727691b5a97af42a4864869d18446449 allows remote authenticated users with users_mod privileges to execu…

• SQL injection

WordPress Boost plugin <= 2.0.4 - SQL Injection vulnerability

• PixelYourSite Professional Boost
• SQL injection

WordPress WooBeWoo Product Filter Pro plugin <= 3.1.8 - SQL Injection vulnerability

• WBW WooBeWoo Product Filter Pro
• SQL injection

SourceCodester Simple Online Food Ordering System ajax.php save_settings sql injection

• SourceCodester Simple Online Food Ordering System
• Other injection
• SQL injection

SourceCodester Simple Online Food Ordering System ajax.php confirm_order sql injection

• SourceCodester Simple Online Food Ordering System
• Other injection
• SQL injection

WordPress Woo Essential plugin <= 4.3.0 - SQL Injection vulnerability

• DiviNext Woo Essential
• SQL injection

WordPress WP Project Manager Pro plugin <= 4.0.1 - SQL Injection vulnerability

• weDevs Pte. Ltd WP Project Manager Pro
• SQL injection

WordPress ProLancer Element plugin <= 1.4.8 - SQL Injection vulnerability

• ThemeBing ProLancer Element
• SQL injection

WordPress FluentCRM Pro plugin <= 3.1.12 - SQL Injection vulnerability

• WP ManageNinja LLC FluentCRM Pro
• SQL injection

itsourcecode Online Clinic Management System Admin Login login.php sql injection

• itsourcecode Online Clinic Management System
• Other injection
• SQL injection

itsourcecode Real Estate Management System search.php sql injection

• itsourcecode Real Estate Management System
• Other injection
• SQL injection

DIAEnergie - SQL Injection

• deltaww DIAEnergie
• SQL injection

DIAEnergie - SQL Injection

• deltaww DIAEnergie
• SQL injection

DIAEnergie - SQL Injection

• deltaww DIAEnergie
• SQL injection

DIAEnergie - SQL Injection

• deltaww DIAEnergie
• SQL injection

Joomla Extension - joomlack.fr - Second order SQL injection in Page Builder CK < 3.6.5

• joomlack.fr Page Builder CK extension for Joomla
• SQL injection

itsourcecode Payroll System admin_class.php login sql injection

• itsourcecode Payroll System
• Other injection
• SQL injection

itsourcecode Library Management System editbooks.php sql injection

• itsourcecode Library Management System
• Other injection
• SQL injection

SourceCodester Simple Online Food Ordering System view_prod.php sql injection

• SourceCodester Simple Online Food Ordering System
• Other injection
• SQL injection

SourceCodester Simple Online Food Ordering System ajax.php add_to_cart sql injection

• SourceCodester Simple Online Food Ordering System
• Other injection
• SQL injection

SourceCodester Simple Online Food Ordering System ajax.php save_user sql injection

• SourceCodester Simple Online Food Ordering System
• Other injection
• SQL injection

itsourcecode Sales and Inventory System cust_edit.php sql injection

• itsourcecode Sales and Inventory System
• Other injection
• SQL injection

Shenzhen Gongji Technology XBROTHER Dynamic Environment Monitoring System plansImmediate PlanController.getImmediatePlans sql injection

• Shenzhen Gongji Technology XBROTHER Dynamic Environment Monitoring System
• Other injection
• SQL injection

itsourcecode Sales and Inventory System processlogin.php sql injection

• itsourcecode Sales and Inventory System
• Other injection
• SQL injection

code-projects Barangay Resident Profiling Management System Resident Search Functionality residents.php sql injection

• code-projects Barangay Resident Profiling Management System
• Other injection
• SQL injection

itsourcecode Hospital Management System Project in PHP viewservicetype.php sql injection

• itsourcecode Hospital Management System Project in PHP
• Other injection
• SQL injection

sambitraj Student-Management-System Management Mutation sql injection

• sambitraj Student-Management-System
• Other injection
• SQL injection

sambitraj Student-Management-System Dashboard sql injection

• sambitraj Student-Management-System
• Other injection
• SQL injection

Joomla Extension - fabrikar.com - Unauthenticated SQL injection in ORDER BY in Fabrik < 4.7.2

• fabrikar.com Fabrik extension for Joomla
• SQL injection

Joomla Extension - fabrikar.com - Unauthenticated SQL injection in list filter condition parameter in Fabrik < 4.7.2

• fabrikar.com Fabrik extension for Joomla
• SQL injection

GeoTools has unauthenticated SQL injection in the jsonArrayContains filter function against PostGIS layers

• SQL injection

>=35.0, <35.1 || >=34.0, <34.5 || >=30.5, <33.6 · fixed in 35.1, 34.5, 33.6

Joomla Extension - yootheme.com - Authenticated, privileged SQL injection in YOOtheme Pro 1.0.0-5.0.40

• yootheme.com YOOtheme Pro extension for Joomla
• SQL injection

Media Library Assistant < 3.40 - Author+ SQL Injection via mla_search_connector

• Media Library Assistant
• SQL injection

Link Whisper < 0.9.7 - Editor+ SQL Injection via domain Parameter

• Link Whisper Free
• SQL injection

SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP submit.php saveUser sql injection

• SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP
• Other injection
• SQL injection

Azure SQL Database Elevation of Privilege Vulnerability

• Microsoft Azure SQL Database
• SQL injection

Azure SQL Database Elevation of Privilege Vulnerability

• Microsoft Azure SQL Database
• SQL injection

BigBlueButton: Blind SQL Injection AUTH (Moderator)

• bigbluebutton
• SQL injection

Fleet: ORDER BY column injection on activity list endpoints

• SQL injection

<4.89.0 · fixed in 4.89.0

Fleet: SQL injection in Okta conditional access endpoint allows host-controlled compromise of the Fleet database

• SQL injection

<4.86.2 · fixed in 4.86.2

itsourcecode Hospital Management System viewappointmentpending.php sql injection

• itsourcecode Hospital Management System
• Other injection
• SQL injection

CodeAstro Apartment Visitor Management System password-recovery.php sql injection

• CodeAstro Apartment Visitor Management System
• Other injection
• SQL injection

CodeAstro Apartment Visitor Management System forgotpw.php sql injection

• CodeAstro Apartment Visitor Management System
• Other injection
• SQL injection

Apache InLong: SQL Injection via Unvalidated MyBatis Dollar-Sign Interpolation in AuditAlertRuleService

• Apache Software Foundation Apache InLong
• SQL injection

Apache InLong: SQL Injection via String Concatenation Vulnerability Report

• Apache Software Foundation Apache InLong
• SQL injection

Apache InLong: Unauthenticated SQL injection in Manager OpenAPI audit alert rule list endpoint

• Apache Software Foundation Apache InLong
• SQL injection

SourceCodester Simple Online Food Ordering System ajax.php delete_category sql injection

• SourceCodester Simple Online Food Ordering System
• Other injection
• SQL injection

SourceCodester Simple Online Food Ordering System ajax.php save_category sql injection

• SourceCodester Simple Online Food Ordering System
• Other injection
• SQL injection

SourceCodester Simple Online Food Ordering System view_order.php sql injection

• SourceCodester Simple Online Food Ordering System
• Other injection
• SQL injection

itsourcecode Hospital Management System viewappointmentapproved.php sql injection

• itsourcecode Hospital Management System
• Other injection
• SQL injection

baserCMS < 5.3.0 SQL Injection and Code Injection via BcDatabaseService.php

• baserproject basercms
• SQL injection
• Code injection

code-projects Simple Inventory System delete.php sql injection

• code-projects Simple Inventory System
• Other injection
• SQL injection

WordPress InfiniteWP Client plugin <= 1.13.9 - SQL Injection vulnerability

• revmakx InfiniteWP Client
• SQL injection

WordPress eShipper Commerce plugin <= 2.16.13 - SQL Injection vulnerability

• WordPress.com eShipper Commerce
• SQL injection