Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.4A SQL injection vulnerability in allows any authenticated Rucio user to execute arbitrary SQL against the backend database through the DID search endpoint ( ).May 6, 2026
- High7.5The Gravity Bookings Premium plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 2.5.9 due to insufficient escaping on the user s…EPSS 0.3%May 6, 2026
- High8.1In ProFTPD through 1.3.9a before 7666224, a SQL injection vulnerability in sqltab_fetch_clients_cb() in contrib/mod_wrap2_sql.c allows a remote attacker to inject arbi…May 5, 2026
- Critical9.3Masa CMS is an open source content management system.May 5, 2026
- Critical9.3Masa CMS is an open source content management system.May 5, 2026
- Critical9.3Masa CMS is an open source content management system.May 5, 2026
- Critical9.4SQLBot is an intelligent Text-to-SQL system based on large language models and RAG.May 5, 2026
- Critical9.8Kestra v1.3.3 and before is vulnerable to SQL Injection.May 5, 2026
- High7.5The WeePie Cookie Allow plugin for WordPress is vulnerable to SQL Injection via the 'consent' parameter in all versions up to, and including, 3.4.11 due to insufficien…May 5, 2026
- High7.5The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to SQL Injection via the 'inputs' parameter in versions u…May 5, 2026
- Critical9.3Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saleswonder LLC WebinarIgnition allows Blind SQL Injection.May 5, 2026
- Low2.1A vulnerability was identified in itsourcecode Courier Management System 1.0.May 5, 2026
- High7.5The GeekyBot — Generate AI Content Without Prompt, Chatbot and Lead Generation plugin for WordPress is vulnerable to SQL Injection via the 'attributekey' parameter in…May 5, 2026
- High8.7Vulnerability in the Oracle MCP Server Helper Tool product of Oracle Open Source Projects (component: helper tool).May 5, 2026
- High7.5The AWP Classifieds plugin for WordPress is vulnerable to SQL Injection via the 'regions' parameter array keys in versions up to, and including, 4.4.5 due to insuffici…May 5, 2026
- Low2.1A flaw has been found in CodeCanyon Perfex CRM up to 3.4.1.May 5, 2026
- Medium5.3n8n is an open source workflow automation platform.May 4, 2026
- Medium5.3n8n is an open source workflow automation platform.May 4, 2026
- Medium5.3n8n is an open source workflow automation platform.May 4, 2026
- Critical9.6OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems.May 4, 2026
- Low2.1A vulnerability was identified in SourceCodester Web-based Pharmacy Product Management System 1.0.May 4, 2026
- Low2.1A vulnerability was determined in CodeAstro Online Classroom 1.0.May 4, 2026
- Low2.1A vulnerability was found in CodeAstro Online Classroom 1.0.May 4, 2026
- Low2.1A vulnerability has been found in CodeAstro Online Classroom 1.0.May 4, 2026
- Low2.1A flaw has been found in CodeAstro Online Classroom 1.0.May 4, 2026