SQL injection.

WordPress WP w3all phpBB plugin <= 3.0.5 - SQL Injection vulnerability

• axew3 WP w3all phpBB
• SQL injection

WordPress BookingPress Appointment Booking Pro plugin <= 6.0.2 - SQL Injection vulnerability

• Repute Infosystems BookingPress Appointment Booking Pro
• SQL injection

WordPress Locatoraid Store Locator plugin <= 3.9.72 - SQL Injection vulnerability

• plainware Locatoraid Store Locator
• SQL injection

WordPress Directory Pro plugin <= 2.5.8 - SQL Injection vulnerability

• e-plugins Directory Pro
• SQL injection

WordPress TheGem (Elementor) theme <= 5.12.3 - SQL Injection vulnerability

• CodexThemes TheGem (Elementor)
• SQL injection

WordPress WordPress Persistent Login plugin <= 3.1.0 - SQL Injection vulnerability

• lukeseager WordPress Persistent Login
• SQL injection

WordPress Security & Malware scan by CleanTalk plugin <= 2.184 - SQL Injection vulnerability

• CleanTalk Inc Security & Malware scan by CleanTalk
• SQL injection

WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.11 - SQL Injection vulnerability

• rtCamp Inc. rtMedia for WordPress, BuddyPress and bbPress
• SQL injection

WordPress Capella theme <= 2.5.5 - SQL Injection vulnerability

• ThemeGoods Capella
• SQL injection

n8n before 1.123.69 PostgREST Filter Injection via Supabase

• n8n
• SQL injection

amirsanni Mini-Inventory-and-Sales-Management-System Transaction.php getAll sql injection

• amirsanni Mini-Inventory-and-Sales-Management-System
• Other injection
• SQL injection

DeDeCMS advancedsearch.php sql injection

• DeDeCMS
• Other injection
• SQL injection

code-projects Employee Management System Admin Login Endpoint aprocess.php sql injection

• code-projects Employee Management System
• Other injection
• SQL injection

code-projects Assessment Management welcome.php sql injection

• code-projects Assessment Management
• Other injection
• SQL injection

Structured Query Language (SQL) Injection through Custom Function Results in Splunk SOAR

• Splunk SOAR
• SQL injection

Structured Query Language (SQL) Injection through the REST API in Splunk Enterprise

• Splunk Enterprise
• SQL injection

Structured Query Language (SQL) Injection through the REST API in Splunk Enterprise

• Splunk Enterprise
• SQL injection

code-projects Hospital Information System User Login UsersController.php login sql injection

• code-projects Hospital Information System
• Other injection
• SQL injection

ISPConfig Authenticated SQL Injection via Remote API primary_id Parameter

• ispconfig3
• SQL injection

Wazuh: Local SQL injection in FIM db due to path lookup interpolation in wazuh-syscheckd

• wazuh
• SQL injection
• CWE-20

Cisco Unified Intelligence Center SQL Injection Vulnerability

• Cisco Unified Intelligence Center
• SQL injection

Cisco Crosswork Security Hardening Release: August 2026

• Cisco Crosswork Planning
• SQL injection

Joomla Extension - cmsjunkie.com - SQL injection in trips search in J-BusinessDirectory < 6.2.3

• cmsjunkie.com J-BusinessDirectory extension for Joomla
• SQL injection

SQL injection in Dell OpenManage Enterprise

• Dell OpenManage Enterprise
• SQL injection

phpMyFAQ before 4.1.7 SQL Injection via Glossary

• thorsten phpMyFAQ
• SQL injection

SQL injection in Dell OpenManage Enterprise

• Dell OpenManage Enterprise
• SQL injection

SQL Injection in Faydam Innovation's FAYDAM Datalogger

• Faydam Innovation Inc. FAYDAM Datalogger
• SQL injection

SQL injection in Dell OpenManage Enterprise

• Dell OpenManage Enterprise
• SQL injection

Joomla Extension - yootheme.com - Unauthenticated SQL injection in Zoo < 4.1.64

• yootheme.com Zoo extension for Joomla
• SQL injection

WordPress Total Donations plugin <= 2.0.5 - SQL Injection vulnerability

• KlbTheme Total Donations
• SQL injection

WordPress Nikstore Core plugin <= 1.5 - SQL Injection vulnerability

• TeconceTheme Nikstore Core
• SQL injection

WordPress NGG Smart Image Search plugin < 4.0.0 - SQL Injection vulnerability

• wpo-HR NGG Smart Image Search
• SQL injection

WordPress Maps Marker Pro plugin <= 4.32 - SQL Injection vulnerability

• Maps Marker Pro
• SQL injection

WordPress Community by PeepSo plugin <= 9.0.5.2 - SQL Injection vulnerability

• Community by PeepSo
• SQL injection

WordPress YITH WooCommerce Membership Premium plugin <= 2.33.0 - SQL Injection vulnerability

• YITH WooCommerce Membership Premium
• SQL injection

Product Shortlist <= 1.0.4 - Unauthenticated SQL Injection via get_shortlisted_products

• Product Shortlist
• SQL injection

Dinatur <= 1.18 - Unauthenticated SQL Injection via Column Name Injection

• Dinatur
• SQL injection

SourceCodester Simple Online Food Ordering System ajax.php delete_menu sql injection

• SourceCodester Simple Online Food Ordering System
• Other injection
• SQL injection

SourceCodester Simple Online Food Ordering System ajax.php save_menu sql injection

• SourceCodester Simple Online Food Ordering System
• Other injection
• SQL injection

SourceCodester Simple Online Food Ordering System ajax.php login sql injection

• SourceCodester Simple Online Food Ordering System
• Other injection
• SQL injection

code-projects Online Job Portal System Password Recovery ForPass.php sql injection

• code-projects Online Job Portal System
• Other injection
• SQL injection

SQL Injection vulnerability in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to execute arbitrary code via the api_vedo/chat endpoint and the utente_chat parameter

• SQL injection

Froxlor: Second-Order SQL Injection via `Admins.add` `ipaddress` Parameter Allows Full Database Exfiltration

• SQL injection

<2.3.8 · fixed in 2.3.8

xianrendzw EasyReport Move Operations ModuleController.java sql injection

• xianrendzw EasyReport
• Other injection
• SQL injection

WordPress Readabler plugin < 2.0.18 - SQL Injection vulnerability

• merkulove Readabler
• SQL injection

WordPress JetAppointment plugin <= 2.5.2 - SQL Injection vulnerability

• Crocoblock. Jetimpex Inc. JetAppointment
• SQL injection

WordPress Affiliates Manager plugin <= 2.9.53 - SQL Injection vulnerability

• wp.insider Affiliates Manager
• SQL injection

WordPress License Manager for WooCommerce plugin <= 3.0.18 - SQL Injection vulnerability

• Saad Iqbal License Manager for WooCommerce
• SQL injection

WordPress Modern Events Calendar plugin < 7.35.0 - SQL Injection vulnerability

• Webnus Inc. Modern Events Calendar
• SQL injection

WordPress Sticky Chat Widget plugin <= 1.4.2 - SQL Injection vulnerability

• gingerplugins Sticky Chat Widget
• SQL injection

WordPress Depicter Slider plugin <= 4.8.0 - SQL Injection vulnerability

• averta Depicter Slider
• SQL injection

WordPress Gravity Forms Bookings premium plugin <= 2.1 - SQL Injection vulnerability

• WPExperts Gravity Forms Bookings premium
• SQL injection

code-projects Task Management System Login Form index.php select_with_multiple_condition sql injection

• code-projects Task Management System
• Other injection
• SQL injection

PHPGurukul Complaint Management System check_availability.php sql injection

• PHPGurukul Complaint Management System
• Other injection
• SQL injection

itsourcecode Hospital Management System viewbilling.php sql injection

• itsourcecode Hospital Management System
• Other injection
• SQL injection

itsourcecode Hospital Management System viewdepartment.php sql injection

• itsourcecode Hospital Management System
• Other injection
• SQL injection

itsourcecode Hospital Management System viewroom.php sql injection

• itsourcecode Hospital Management System
• Other injection
• SQL injection

SourceCodester Class and Exam Timetabling System edit_subject1.php sql injection

• SourceCodester Class and Exam Timetabling System
• Other injection
• SQL injection

SourceCodester Class and Exam Timetabling System edit_subject2.php sql injection

• SourceCodester Class and Exam Timetabling System
• Other injection
• SQL injection

ERPNext: SQL Injection in "Inactive Customers" report via unvalidated `doctype` filter

• frappe erpnext
• SQL injection