Vulnerability index

Browse CVEs

10,000+ matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness SQL InjectionCWE-89 × clear
Unclassified HIGH 8.5
CVE-2026-52697

Subscriber SQL Injection in Taskbuilder <= 5.0.7 versions.

Mitigation only
Fix from $1,950 2026-06-15
Unclassified HIGH 8.5
CVE-2026-52700

Subscriber SQL Injection in WCMultiShipping <= 3.0.2 versions.

Mitigation only
Fix from $1,950 2026-06-15
Unclassified CRITICAL 9.3
CVE-2026-52693

Unauthenticated SQL Injection in eCommerce Product Catalog <= 3.5.5 versions.

Mitigation only
Fix from $2,300 2026-06-15
Unclassified CRITICAL 9.3
CVE-2026-49776

Unauthenticated SQL Injection in GPTranslate – Multilingual AI Translation for WordPress: Automatically Translate Websites <= 2.32.6 versions.

Mitigation only
Fix from $2,300 2026-06-15
Unclassified CRITICAL 9.3
CVE-2026-49067

Unauthenticated SQL Injection in Advanced 301 and 302 Redirect <= 1.6.9 versions.

Mitigation only
Fix from $2,300 2026-06-15
Unclassified HIGH 8.5
CVE-2026-48964

Subscriber SQL Injection in ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.6 versions.

Mitigation only
Fix from $1,950 2026-06-15
Unclassified HIGH 8.5
CVE-2026-48882

Subscriber SQL Injection in WP Time Slots Booking Form <= 1.2.50 versions.

Mitigation only
Fix from $1,950 2026-06-15
Unclassified CRITICAL 9.3
CVE-2026-48886

Unauthenticated SQL Injection in JS Help Desk <= 3.0.9 versions.

Mitigation only
Fix from $2,300 2026-06-15
Unclassified HIGH 8.5
CVE-2026-48874

Subscriber SQL Injection in GamiPress <= 7.8.7 versions.

Mitigation only
Fix from $1,950 2026-06-15
Unclassified CRITICAL 9.3
CVE-2026-45439

Unauthenticated SQL Injection in Realtyna Organic IDX plugin <= 5.1.0 versions.

Mitigation only
Fix from $2,300 2026-06-15
Unclassified CRITICAL 9.3
CVE-2026-42665

Unauthenticated SQL Injection in WP Data Access <= 5.5.70 versions.

Mitigation only
Fix from $2,300 2026-06-15
Unclassified CRITICAL 9.3
CVE-2026-42386

Unauthenticated SQL Injection in Order Delivery Date for WooCommerce <= 4.5.1 versions.

Mitigation only
Fix from $2,300 2026-06-15
Unclassified CRITICAL 9.3
CVE-2026-42639

Unauthenticated SQL Injection in GD Rating System <= 3.6.2 versions.

Mitigation only
Fix from $2,300 2026-06-15
Unclassified CRITICAL 9.3
CVE-2026-42381

Unauthenticated SQL Injection in Funnel Builder by FunnelKit <= 3.15.0.1 versions.

Mitigation only
Fix from $2,300 2026-06-15
Unclassified CRITICAL 9.3
CVE-2026-40798

Unauthenticated SQL Injection in wpForo Forum <= 3.0.4 versions.

Mitigation only
Fix from $2,300 2026-06-15
Unclassified HIGH 7.5
CVE-2026-40762

Unauthenticated SQL Injection in WPGraphQL < 2.11.1 versions.

Mitigation only
Fix from $1,950 2026-06-15
Unclassified HIGH 8.5
CVE-2026-40766

Subscriber SQL Injection in MasterStudy LMS <= 3.7.25 versions.

Mitigation only
Fix from $1,950 2026-06-15
Unclassified CRITICAL 9.3
CVE-2026-40771

Unauthenticated SQL Injection in Contest Gallery <= 28.1.6 versions.

Mitigation only
Fix from $2,300 2026-06-15
Unclassified CRITICAL 9.3
CVE-2026-39519

Unauthenticated SQL Injection in GeekyBot <= 1.2.0 versions.

Mitigation only
Fix from $2,300 2026-06-15
Unclassified CRITICAL 9.3
CVE-2026-39530

Unauthenticated SQL Injection in SpeakOut! Email Petitions <= 4.6.5 versions.

Mitigation only
Fix from $2,300 2026-06-15
Unclassified CRITICAL 9.3
CVE-2026-39502

Unauthenticated SQL Injection in Form Maker by 10Web <= 1.15.38 versions.

Mitigation only
Fix from $2,300 2026-06-15
Unclassified CRITICAL 9.3
CVE-2026-39511

Unauthenticated SQL Injection in WP Photo Album Plus <= 9.1.08.001 versions.

Mitigation only
Fix from $2,300 2026-06-15
Unclassified CRITICAL 9.3
CVE-2026-39512

Unauthenticated SQL Injection in GeoDirectory <= 2.8.152 versions.

Mitigation only
Fix from $2,300 2026-06-15
Unclassified CRITICAL 9.3
CVE-2026-39492

Unauthenticated SQL Injection in WP Maps <= 4.9.1 versions.

Mitigation only
Fix from $2,300 2026-06-15
Unclassified CRITICAL 9.3
CVE-2026-39493

Unauthenticated SQL Injection in Simply Schedule Appointments <= 1.6.9.27 versions.

Mitigation only
Fix from $2,300 2026-06-15
Unclassified CRITICAL 9.3
CVE-2026-39441

Unauthenticated SQL Injection in Feed KuantoKusta for WooCommerce – Free <= 5.3 versions.

Mitigation only
Fix from $2,300 2026-06-15
Unclassified HIGH 8.5
CVE-2026-24637

Contributor SQL Injection in PowerPress Podcasting <= 11.15.10 versions.

Mitigation only
Fix from $1,950 2026-06-15
Unclassified CRITICAL 9.8
CVE-2026-50890

Bernd Bestel grocy v4.6.0 was discovered to contain a SQL injection vulnerability in the product-group parameter at /stockreports/spendings. This vul…

Mitigation only
Fix from $2,300 2026-06-15
Unclassified CRITICAL 9.8
CVE-2026-48114

Metacat is data repository software that helps researchers preserve, share, and discover data. Versions 2.0.0 and and above contain an unauthenticate…

Patch available
Fix from $2,300 2026-06-15
Unclassified CRITICAL 9.8
CVE-2026-38812

RuoYi v4.8.2 is vulnerable to SQL Injection via the /tool/gen/createTable endpoint. The issue affects the code generation module and may allow an aut…

Mitigation only
Fix from $2,300 2026-06-15