SQL injection.

Xinhu Rainrock RockOA Openkqj Action openkqjAction.php returnchuli sql injection

• Xinhu Rainrock RockOA
• Other injection
• SQL injection

Furion .NET Framework StringRenderExtensions.cs String.Replace sql injection

• Furion .NET Framework
• Other injection
• SQL injection

highwarden Super Store Finder index.php sql injection

• highwarden Super Store Finder
• Other injection
• SQL injection

Paymendo Bank Transfer <= 1.1 - Subscriber+ SQLi via 'orderBy' Parameter

• paymendo
• SQL injection

Paymendo Bank Transfer <= 1.1 - Unauthenticated Blind SQLi via 'paymendo_bank_transfer_completed_payment' Parameter

• paymendo
• SQL injection

Post Voting System <= 1.0 - Unauthenticated SQLi via 'id' Parameter

• Post Voting System
• SQL injection

WP Verify API <= 1.0.0 - Unauthenticated SQLi via 'verify' Parameter

• WP Verify API
• SQL injection

Loja Automática <= 1.0.0 - Unauthenticated SQLi via 'id' Parameter

• Loja Automática
• SQL injection

ASPL Product Quotation <= 1.1.0 - Unauthenticated SQLi via 'quote_id' Parameter

• ASPL Product Quotation
• SQL injection

Datalist it <= 0.0.3 - Unauthenticated SQLi via dli_fronted_action

• Datalist it
• SQL injection

WP-Partner <= 1.2.1 - Unauthenticated SQLi via 'id' Parameter

• WP-Partner
• SQL injection

RecordBrowser <= 1.1.7 - Unauthenticated SQLi via 'recordid' Parameter

• Recordbrowser
• SQL injection

WpCues Basic Quiz <= 1.6.5 - Unauthenticated SQLi via Quiz Result Submission

• WpCues Basic Quiz
• SQL injection

Llavero.io <= 0.1.4 - Unauthenticated Blind SQLi via 'cill_login' Parameter

• Llavero.io
• SQL injection

Site Setup Wizard <= 1.5.8 - Unauthenticated SQLi via ssw_check_admin_email_exists

• Site Setup Wizard
• SQL injection

Social Web Suite <= 4.1.12 - Unauthenticated Blind SQLi via Unset Shared Secret

• Social Web Suite
• SQL injection

Tcard WP <= 1.8.0 - Unauthenticated SQLi via group_id Parameter

• Tcard WP
• SQL injection

Mobile Builder <= 1.4.2 - Unauthenticated SQLi via 'vendor_id' Parameter

• Mobile builder
• SQL injection

WordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.13.1 - SQL Injection vulnerability

• Dmitry V. Barcode Scanner with Inventory & Order Manager
• SQL injection

WordPress uListing plugin <= 2.2.0 - SQL Injection vulnerability

• Stylemix uListing
• SQL injection

WordPress WP Ultimate CSV Importer plugin <= 9.2 - SQL Injection vulnerability

• Smackcoders Inc. WP Ultimate CSV Importer
• SQL injection

WordPress Frontend Admin by DynamiApps plugin <= 3.29.13 - SQL Injection vulnerability

• Shabti Kaplan Frontend Admin by DynamiApps
• SQL injection

WordPress Leyka plugin <= 3.32.3 - SQL Injection vulnerability

• VaultDweller Leyka
• SQL injection

WordPress Qode Tours plugin <= 3.1.3.2 - SQL Injection vulnerability

• Qode Tours
• SQL injection

WordPress Events Manager plugin <= 7.4.6 - SQL Injection vulnerability

• Marcus Events Manager
• SQL injection

WordPress ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes plugin <= 1.5.3 - SQL Injection vulnerability

• ELEXtensions ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes
• SQL injection

WordPress Tickera plugin <= 3.6.0.6 - SQL Injection vulnerability

• Tickera
• SQL injection

WP Directory Kit <= 1.5.9 - Authenticated (Subscriber+) SQL Injection via 'display_name' Profile Field (Second-Order)

• wpdirectorykit WP Directory Kit
• SQL injection

Appointment Booking Plugin <= 5.7.2 - Unauthenticated SQL Injection via 'booking[service_id]' Parameter

• Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress
• SQL injection

WP Booking System <= 2.1.0.1 - Authenticated (Subscriber+) SQL Injection via 'current_month' Parameter

• murgroland WP Booking System – Booking Calendar
• SQL injection

LTL Freight Quotes – Old Dominion Edition 4.2.11 - 4.2.18 - Unauthenticated SQLi via Shipping Rule 'edit_id' Parameter

• LTL Freight Quotes
• SQL injection

Rank Math SEO < 1.0.280 - Admin+ SQLi via 'per_page' Parameter

• Rank Math SEO
• SQL injection

Smart Popup by Supsystic <= 1.13.2 - Authenticated (Administrator+) SQL Injection via 'sidx' Parameter

• supsysticcom Smart Popup by Supsystic
• SQL injection

FireBox <= 3.1.13 - Authenticated (Author+) SQL Injection via FireBox Form Display Condition

• fireplugins FireBox – WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment
• SQL injection

SQL injection in JetBrains Exposed

• JetBrains Exposed
• SQL injection

WordPress Post Author Authenticated SQLi

• SQL injection

WordPress Post Author Authenticated SQLi

• SQL injection

PHPNuxBill through 2025.3.20 Unauthenticated SQL Injection via radius.php

• hotspotbilling phpnuxbill
• SQL injection

HortusFox before 6.2 SQL Injection via /api/locations/list include_info Parameter

• danielbrendel hortusfox-web
• SQL injection

ProcessMaker has SQL injection in the tasks endpoint through the order_by parameter

• processmaker
• SQL injection

Testimonials by BestWebSoft 1.0.5 - 1.0.8 - Unauthenticated SQLi via 'offset' Parameter

• Testimonials by BestWebSoft
• SQL injection

WordPress Traveler theme <= 3.2.9 - SQL Injection vulnerability

• Shinetheme Traveler
• SQL injection

WordPress ProfileGrid plugin <= 6.0.0.2 - SQL Injection vulnerability

• Metagauss ProfileGrid
• SQL injection

WordPress EduAdmin Booking plugin < 6.0.0 - SQL Injection vulnerability

• MultiNet Interactive AB EduAdmin Booking
• SQL injection

WordPress Ajax Search Pro plugin <= 4.29.1 - SQL Injection vulnerability

• wpdreams Ajax Search Pro
• SQL injection

WordPress tagDiv Opt-In Builder plugin <= 1.7.6 - SQL Injection vulnerability

• tagDiv Opt-In Builder
• SQL injection

WordPress tagDiv Opt-In Builder plugin <= 1.7.6 - SQL Injection vulnerability

• tagDiv Opt-In Builder
• SQL injection

WordPress JNews - Pay Writer plugin <= 12.0.1 - SQL Injection vulnerability

• jegtheme JNews - Pay Writer
• SQL injection

WordPress Taskbuilder plugin <= 6.0.5 - SQL Injection vulnerability

• Taskbuilder
• SQL injection

WordPress WPLMS theme <= 4.973 - SQL Injection vulnerability

• VibeThemes WPLMS
• SQL injection

WordPress WPLMS plugin < 1.9.9.8.2 - SQL Injection vulnerability

• VibeThemes WPLMS
• SQL injection

WordPress UpSolution Core plugin <= 9.3 - SQL Injection vulnerability

• UpSolution Core
• SQL injection

Code Snippets < 3.10.0 - Admin+ SQLi in Migration Importers Leading to Network-Wide Credential Disclosure (Multisite)

• Code Snippets
• SQL injection

Jivejdon through 5.0 SQL Injection via username in userListAction

• banq jivejdon
• SQL injection

Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection

• IBM Guardium Data Protection
• SQL injection

Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection

• IBM Guardium Data Protection
• SQL injection

IBM Guardium Data Protection is affected by multiple vulnerabilities.

• IBM Guardium Data Protection
• SQL injection

Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

• IBM Security Verify Access
• IBM Verify Identity Access
• SQL injection

MariaDB Connector/Node.js: SQL injection in the text protocol when the session uses NO_BACKSLASH_ESCAPES

• SQL injection

<3.2.5 || >=3.3.0, <3.3.4 || >=3.4.0, <3.4.7 || >=3.5.0-rc.0, <3.5.4 · fixed in 3.2.5, 3.3.4, 3.4.7, 3.5.4

MariaDB Connector/Node.js: SQL injection through object keys in SET expansion (permitSetMultiParamEntries)

• SQL injection

>=3.2.0, <3.2.5 || >=3.3.0, <3.3.4 || >=3.4.0, <3.4.7 || >=3.5.0-rc.0, <3.5.4 · fixed in 3.2.5, 3.3.4, 3.4.7, 3.5.4