CWE-89 · SQL Injection (page 11)

Page 11 of 100 — CVEs classified under CWE-89, newest first, with CVSS severity and publication dates.

All CVEs classified under CWE-89 — newest first (page 11 of 100)
CVESeverityScorePublishedSummary
CVE-2026-66447Critical9.32026-08-06Unauthenticated SQL Injection in WordPress File Upload <= 5.1.7 versions.
CVE-2026-65569High8.52026-08-06Subscriber SQL Injection in WP Job Portal <= 2.5.6 versions.
CVE-2026-65547High8.52026-08-06Subscriber SQL Injection in Creative Mail <= 1.6.9 versions.
CVE-2026-65546Critical9.32026-08-06Unauthenticated SQL Injection in Qode Tours <= 3.1.3.1 versions.
CVE-2026-65520Critical9.32026-08-06Unauthenticated SQL Injection in WP OAuth Server <= 6.2.0 versions.
CVE-2026-65508Critical9.32026-08-06Unauthenticated SQL Injection in Simply Schedule Appointments <= 1.6.12.10 versions.
CVE-2026-34191Critical9.12026-08-06Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Portable Runtime Utility via apr_dbd_oracle provid…
CVE-2026-5134Critical9.82026-08-06Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Loca Software Informatics Technology Ltd. Co. CMS allows…
CVE-2026-19021High7.32026-08-06A security vulnerability has been detected in SourceCodester Computer Repair Shop Management System 1.0. Affected by this issue is some unknown functionality o…
CVE-2026-19020Medium6.32026-08-06A weakness has been identified in itsourcecode Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /servicet…
CVE-2026-16065Medium6.52026-08-06The Welcart e-Commerce WordPress plugin before 2.11.32 does not properly sanitise a value taken from an imported CSV file before using it in a SQL statement, a…
CVE-2026-12713Critical9.12026-08-06The WPCargo Track & Trace WordPress plugin before 8.0.4 does not properly sanitise and escape a parameter before using it in a SQL statement, allowing unauthen…
CVE-2026-18970High7.32026-08-06A flaw has been found in Rongzhitong Visual Integrated Command and Dispatch Platform up to 20260617. The affected element is an unknown function of the file /d…
CVE-2026-18958High7.32026-08-05A vulnerability was detected in imranrisal-dev Student-Management-System 18ea7904c339e0c7b0234724a79c939ce6191def/a8d43a29aaf267e7ca97171d6dbb44057bcd7f8c. Aff…
CVE-2026-107162026-08-05Directus contains an authenticated SQL injection vulnerability in the collection creation flow when the instance uses PostgreSQL with PostGIS enabled. An admin…
CVE-2026-71292High7.22026-08-05Subrion CMS's admin grid sorting helper, _gridGetSorting in includes/classes/ia.base.controller.admin.php, whitelists the (ASC/DESC) request parameter via in_a…
CVE-2026-71288High8.82026-08-05Koha's guided report builder (reports/guided_reports.pl) reads the CGI parameter and, for each value, a dynamically-named parameter, and concatenates both dire…
CVE-2026-71287High8.82026-08-05Cacti's sanitize_sql_column (lib/functions.php) sanitizes user-supplied ORDER BY column names using the regex . Because this allowlist retains letters, digits…
CVE-2026-71282Medium6.52026-08-05ChirpStack's SQLite-backend device tag filtering (chirpstack/src/storage/device.rs, in both get_count and list) interpolates the user-supplied tag KEY directly…
CVE-2026-71276High7.12026-08-05Magistrala (formerly Mainflux)'s message-readers API reads a value from the HTTP query string (readers/api/http/transport.go) with no validation and interpolat…
CVE-2026-71248Critical9.82026-08-05Inventory-Management-System-PHP's login.php constructs its authentication query via direct string concatenation of raw POST parameters: = "select * from user w…
CVE-2026-71237Critical9.82026-08-05Miantang/IoT-PHP's index.php implements a POST /userlogin route that reads the password directly from ['pwd'] with no sanitization and concatenates it into a r…
CVE-2026-71231Critical9.82026-08-05IOTSmartHome's gui/login.php checkCookie function builds an authentication query as SELECT * FROM users WHERE ID='<decoded lastLogin cookie>' after base64-deco…
CVE-2026-8029Low3.92026-08-05The ZTE Smart Life app contains an SQL injection vulnerability that allows attackers to execute UNION SELECT statements to query sensitive data in the feedback…
CVE-2026-71207Critical9.82026-08-05The Stock-Inventory-Management-System application's login.php assigns raw username/password values to and builds its authentication query by directly concatena…
CVE-2026-5651Medium4.92026-08-05The Askeet plugin for WordPress is vulnerable to SQL Injection via the 'sql_query' parameter in multiple AJAX actions (askeet_execute_sql_query, askeet_export_…
CVE-2026-18881High7.52026-08-05The TableOn – WordPress Posts Table Filterable plugin for WordPress is vulnerable to blind SQL Injection via the `filter_data[comment_count]` parameter of the…
CVE-2026-15281Medium6.52026-08-05The User Access Manager plugin for WordPress is vulnerable to Second-Order SQL Injection via the 'id' parameter of the wp_ajax_save-attachment-compat AJAX acti…
CVE-2026-11977Medium6.52026-08-05The WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars plugin for WordPress is vulnerable to generic SQL Injection via the 'wpma_met…
CVE-2026-11969Medium4.92026-08-05The WP TripAdvisor Review Slider plugin for WordPress is vulnerable to generic SQL Injection via 'curselrevs[]' Parameter in all versions up to, and including…
CVE-2026-11920Medium4.92026-08-05The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to time-based SQL Injection via the 'order' parameter in…
CVE-2026-49004Medium6.52026-08-05The built-in PostgreSQL service on the mobile device suffers from misconfiguration flaws and command injection vulnerabilities. This service listens on a speci…
CVE-2026-15360Critical9.12026-08-05The Ajax Load More WordPress plugin before 8.0.1 does not properly sanitise and escape a parameter before using it in a SQL query, allowing unauthenticated at…
CVE-2026-5062Medium4.92026-08-05The PrettyLinks – Affiliate Links, Link Branding, Link Tracking, Marketing and Stripe Payments Plugin plugin for WordPress is vulnerable to SQL Injection via t…
CVE-2026-15941Medium6.52026-08-05The plugin provides an Admin Search page that allows users with the `edit_posts` capability to run Relevanssi searches from the WordPress dashboard. The AJAX h…
CVE-2026-15918High7.52026-08-05VikAppointments Service Booking Calendar wordpress plugin is vulnerable to unauthenticated SQL injection due to one of the parameters that controls how the pub…
CVE-2026-11421Medium6.52026-08-05The ERP: Complete HR, Accounting & CRM Suite with WooCommerce CRM Support plugin for WordPress is vulnerable to SQL Injection via the 'erpadvancefilter' parame…
CVE-2026-18896Medium6.32026-08-05A vulnerability was determined in lavkush-maurya Student-Registration-System 1.0. The affected element is an unknown function of the file /student/changepass.p…
CVE-2026-18859High7.32026-08-05A vulnerability was identified in ESAFENET CDG up to 20260615. Affected is an unknown function of the file /CDGServer3/ukey/usbkey;logindojojs. Such manipulati…
CVE-2026-18854High7.32026-08-05A vulnerability has been found in Shandong Hoteam PDM Product Data Management System up to 8.3.10. The impacted element is the function GetStoredClassByFilter…
CVE-2026-69704Medium6.52026-08-04Atals-Livre contains a SQL injection vulnerability that allows attackers to manipulate database queries by passing unsanitized input through a GET parameter to…
CVE-2026-646312026-08-04A vulnerability allowing a low-privileged user to inject SQL and extract database contents.
CVE-2026-18766Medium6.32026-08-04A flaw has been found in chetans9 core-php-admin-panel up to 90d07ed5aac5e0f09b6a5828d7bb2eb83010763f. This issue affects some unknown processing of the file /…
CVE-2026-70373High8.82026-08-04Koha's reports/issues_stats.pl (the circulation statistics report) builds its calculation query in sub calculate by concatenating several user-controlled reque…
CVE-2026-70372High8.82026-08-04Koha's reports/bor_issues_top.pl builds dynamic SQL in sub calculate by concatenating several user-controlled request parameters directly into the query string…
CVE-2026-70371High8.82026-08-04Koha's reports/issues_avg_stats.pl builds dynamic SQL in sub calculate by concatenating several user-controlled request parameters directly into the query stri…
CVE-2026-70370High8.82026-08-04Koha's reports/catalogue_stats.pl builds dynamic SQL in sub calculate by interpolating the user-controlled Line and Column request parameters directly into ide…
CVE-2026-70369High8.82026-08-04Koha's reports/acquisitions_stats.pl builds its per-cell statistics query in sub calculate by interpolating the user-controlled Filter request parameters direc…
CVE-2026-14872Medium6.82026-08-04The Database for Contact Form 7, WPforms, Elementor forms WordPress plugin before 1.5.5 does not properly sanitise and escape a parameter before using it in a…
CVE-2026-18719Medium6.32026-08-04A vulnerability was detected in cemtan sar2html 4.0.0. This affects an unknown part of the file sar2html.py of the component Search. Performing a manipulation…
CVE-2026-48330Critical10.02026-08-03Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could re…
CVE-2026-48326Critical9.92026-08-03Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could re…
CVE-2026-69240Critical9.82026-08-03Sequelize is a Node.js ORM tool. Prior to 6.37.4, SQL injection is possible with strings only if dialect is set to oracle. The escape function defined in sql-s…
CVE-2026-52521High8.12026-08-03A SQL injection vulnerability in Z-BlogPHP 1.7.5 allows authenticated attackers to execute arbitrary SQL commands via the id parameter in the CommentBat featur…
CVE-2026-51775Critical9.82026-08-03SQL injection vulnerability in Fastadmin v.1.6.1.20250430 allows an attacker to exectue arbitrary code via the application/common/controller/Backend.php compon…
CVE-2026-18737Medium6.52026-08-03Shlink contains a blind SQL injection vulnerability that allows any authenticated API key holder to inject arbitrary SQL fragments by supplying an unvalidated…
CVE-2026-41453High8.82026-08-03Krayin CRM before 2.2.4 contains a blind SQL injection vulnerability in the leads DataGrid that allows authenticated users with leads access to inject arbitrar…
CVE-2026-69085Critical10.02026-08-03SiYuan before v3.7.3 contains a SQL injection vulnerability in the /api/filetree/searchDocs endpoint, where the caller-supplied keyword parameter is concatenat…
CVE-2026-69084Critical10.02026-08-03SiYuan versions <= v3.7.2 expose the /api/search/searchEmbedBlock endpoint, which passes a client-supplied SQL statement verbatim to the main read-write siyuan…
CVE-2026-69083Critical10.02026-08-03SiYuan versions before v3.7.3 contain SQL injection vulnerabilities in the fullTextSearchAssetContent endpoint reachable by unauthenticated users and publish R…
CVE-2026-18592Medium4.72026-08-03A security flaw has been discovered in osCommerce 4.14.63493. Affected by this issue is the function EmailController of the file app/lib/backend/controllers/Em…
CVE-2026-16572High8.62026-08-03The LogMyTrip WordPress plugin through 1.9 does not sanitize and escape a value taken from a cookie before using it in a SQL query, allowing unauthenticated us…
CVE-2026-16539High8.12026-08-03The sm page duplicator WordPress plugin through 1.0.0 does not sanitise and escape a stored value before using it in a SQL statement when duplicating a page, a…
CVE-2026-16532Critical9.12026-08-03The Link Library WordPress plugin before 7.9.3 does not properly sanitise and escape a user-supplied value before using it in a SQL query, allowing unauthentic…
CVE-2026-12965Critical9.12026-08-03The Super Store Finder WordPress plugin before 7.11 does not sanitize a parameter of an unauthenticated AJAX action before using it in a SQL query, allowing un…
CVE-2026-65321Critical9.82026-08-02PyAthena prior to 3.35.4 contains a sql injection vulnerability that allows unauthenticated attackers to inject arbitrary SQL by exploiting improper quote-esca…
CVE-2026-14920High8.22026-08-02## Summary
CVE-2026-6453Medium6.52026-08-01The CubeWP Framework plugin for WordPress is vulnerable to SQL Injection in all versions up to and including 1.1.30. This is due to insufficient input sanitiza…
CVE-2026-17555Medium4.92026-08-01The WPvivid Backup & Migration plugin for WordPress is vulnerable to SQL Injection via the export_data parameter in versions up to, and including, 0.9.131. Thi…
CVE-2026-16614Medium4.92026-08-01The GSheetConnector – CF7 Google Sheets Connector with Real-Time Sync plugin for WordPress is vulnerable to generic SQL Injection via the 's' parameter in all…
CVE-2026-16087Medium6.52026-08-01The Icegram Engage – Popups, Optins, CTAs & Lead Generation plugin for WordPress is vulnerable to second-order SQL Injection via 'messages[][id]' Parameter in…
CVE-2026-15951Medium4.92026-08-01The Icegram Mailer plugin for WordPress is vulnerable to SQL Injection via the 'fields' parameter in versions up to, and including, 1.0.12. This is due to insu…
CVE-2026-15018Medium5.32026-08-01The Database Collation Fix plugin for WordPress is vulnerable to time-based SQL Injection via the 'force-collation-algorithm' parameter in all versions up to…
CVE-2026-13596Critical9.12026-08-01The Participants Database WordPress plugin before 2.7.8.4 does not properly sanitize and escape a user-supplied parameter before using it in a SQL query, allow…
CVE-2026-15403Medium4.92026-08-01The Pinpoint Booking System – Version 2 plugin for WordPress is vulnerable to blind SQL Injection via the 'field' parameter in all versions up to, and includin…
CVE-2026-45376Medium5.52026-07-31Decidim is a participatory democracy framework. Prior to 0.30.9, from 0.31.0 before 0.31.5, and in 0.32.0.rc1 before 0.32.0.rc2, the GET /admin/organization/us…
CVE-2025-69948Critical9.82026-07-31SourceCodester Modern Loan Management System 1.0 is vulnerable to SQL Injection in /admin/delete_group.php?id=1.
CVE-2025-69946Critical9.82026-07-31SourceCodester Modern Loan Management System 1.0 is vulnerable to SQL Injection in ajaxData.php via the parameters district_id , division_id, region_id, and wa…
CVE-2026-580482026-07-31Improper preservation of SQL mode when renaming databases in cPanel allows execution of SQL in root context.
CVE-2026-17351Critical9.02026-07-31The fix for CVE-2026-12045 in pgAdmin 4 9.16 required the LLM-supplied query passed to the AI Assistant's execute_sql_query tool to parse, via sqlparse, as exa…
CVE-2026-17346High8.82026-07-31The fix for CVE-2026-12044 in pgAdmin 4 9.16 hardened qtLiteral and switched sixteen COMMENT ON / pgstattuple / pgstatindex templates to it, but missed several…
CVE-2026-465932026-07-31A SQL injection vulnerability has been identified in the PHP Jabbers - PHP Poll Script. Improper neutralization of input provided by user to pjAdminPolls.contr…
CVE-2025-676502026-07-31An authenticated SQL injection vulnerability has been identified in multiple PHP Jabbers scripts. Improper neutralization of input provided by an authenticated…
CVE-2025-676492026-07-31A SQL injection vulnerability has been identified in PHP Jabbers - Car Rental Script . Improper neutralization of input provided by user into parameters respon…
CVE-2026-15381Low3.72026-07-31The WP Go Maps WordPress plugin before 10.1.04 does not properly sanitise and escape a parameter before using it in a SQL query, allowing unauthenticated user…
CVE-2026-15258High8.12026-07-31The Product Feed Manager For WooCommerce WordPress plugin before 7.6.1 does not properly sanitise and escape product-feed custom filter rules before using the…
CVE-2026-14554Medium6.52026-07-31The Check & Log Email WordPress plugin before 2.0.15 does not properly sanitize and escape parameters before using them in SQL queries, allowing users with ad…
CVE-2026-12721High8.62026-07-31The Kirki WordPress plugin before 6.0.13 does not properly sanitise and escape a value taken from the request before using it in a SQL statement, allowing una…
CVE-2026-63221Critical9.42026-07-31CodeIgniter is a PHP full-stack web framework. From 4.3.0 through 4.7.3, Query Builder deleteBatch() substitutes bound values from where() conditions into gene…
CVE-2026-62845Medium4.72026-07-30Kamaji is the Hosted Control Plane Manager for Kubernetes. Prior to 26.7.4-edge, the PostgreSQL and MySQL datastore drivers build DDL statements by interpolati…
CVE-2025-69947Critical9.82026-07-30SourceCodester Tailor Management System 1.0 is vulnerable to SQL Injection in customeredit.php?id=1.
CVE-2025-69941Critical9.82026-07-30SourceCodester Tailor Management System 1.0 is vulnerable to SQL Injection in addmeasurement.php?id=1.
CVE-2025-69938Critical9.82026-07-30CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in renew.php via the parameter membershipType.
CVE-2025-69937Critical9.82026-07-30CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in the edit_type.php endpoint via the Parameter id.
CVE-2025-69936Critical9.82026-07-30CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /edit_member.php?id=1.
CVE-2025-69935Critical9.82026-07-30CodeAstro Membership Management System 1.0 is vulnerale to SQL Injection in the report.php and revenue_report.php via the fromDate parameter.
CVE-2025-69934Critical9.82026-07-30CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /delete_members.php?id=1.
CVE-2025-69933Critical9.82026-07-30CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /memberProfile.php?id=1.
CVE-2025-69931Critical9.82026-07-30CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /delete_membership.php?id=1.
CVE-2025-69930Critical9.82026-07-30CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /print_membership_card.php?id=1.