Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman Views for WPForms views-for-wpforms-lite allows Blind SQL In…May 12, 2026
- High8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman Ninja Forms Views – Display & Edit Ninja Forms Submiss…May 12, 2026
- Medium5.9A vulnerability has been identified in blueplanet 100 NX3 M8 (All versions), blueplanet 100 TL3 GEN2 (All versions), blueplanet 105 TL3 (All versions < V3.92), bluepla…May 12, 2026
- Critical9.8Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Akilli Commerce Software Technologies Ltd.EPSS 0.3%May 12, 2026
- Medium6.5The Eight Day Week Print Workflow plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'title' parameter in the AJAX action in all versions up…May 12, 2026
- High7.5The AI Chatbot & Workflow Automation by AIWU plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 1.4.17 due to insufficient escaping…May 12, 2026
- Low3.4SQL injection vulnerability exists in @sap/hdi-deploy package, where SQL queries are dynamically constructed using user input without proper parameterization or prepar…May 12, 2026
- Critical9.6SAP S/4HANA (SAP Enterprise Search for ABAP) contains a SQL injection vulnerability that allows an authenticated attacker to inject malicious SQL statements through us…May 12, 2026
- Critical9.8HireFlow v1.2 is vulnerable to SQL injection in the /login and /search endpoints.May 11, 2026
- High7.3SQL Injection in MuuCMF T6 v1.9.4.20260115 allows an unauthenticated attacker to compromise the entire database, achieve unauthorized administrative access, and potent…May 11, 2026
- High8.7SQL injection vulnerability in pgAdmin 4 Maintenance Tool.May 11, 2026
- Medium6.0Corteza contains a SQL injection vulnerability in its Microsoft SQL Server (MSSQL) backend when filtering Compose records by the meta field.This issue affects corteza: 2024.9.8.May 11, 2026
- High8.8WordPress Plugin Survey & Poll 1.5.7.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting mali…EPSS 0.3%May 10, 2026
- High8.8Balbooa Joomla Forms Builder 2.0.6 contains an unauthenticated SQL injection vulnerability in the form submission handler that allows remote attackers to execute arbit…EPSS 0.3%May 10, 2026
- High8.8Opencart TMD Vendor System 3.x contains a blind SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting SQL code…EPSS 0.3%May 10, 2026
- Low2.1A vulnerability has been found in CodeAstro Online Catering Ordering System 1.0.May 10, 2026
- High7.4In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the PDO Firebird driver improperly handles NUL bytes when prepar…EPSS 0.4%May 10, 2026
- High7.0Gibbon versions before v30.0.01 are affected by an authenticated SQL Injection vulnerability by abusing the Tracking/graphing https://github.com/GibbonEdu/core/blob/c4…May 9, 2026
- Critical10.0Emlog is an open source website building system.May 8, 2026
- Low2.3pgx is a PostgreSQL driver and toolkit for Go.May 8, 2026
- Critical9.8Beauty Parlour Management System v1.1 was discovered to contain a SQL injection vulnerability via the aptnumber parameter in the /appointment-detail.php endpoint.May 8, 2026
- Medium6.3PraisonAI is a multi-agent teams system.May 8, 2026
- High8.1PraisonAI is a multi-agent teams system.May 8, 2026
- High8.6The OttoKit: All-in-One Automation Platform WordPress plugin before 1.1.23 does not properly sanitize user input before using it in a SQL statement, which could allow…May 8, 2026
- Critical9.8Certain GL.iNet devices with 4.x firmware allow authentication bypass (resulting in administrative control of the device) via a username that is both a valid SQL state…EPSS 0.8%May 8, 2026