Browse CVEs

CRITICAL 10.0 CVE-2025-30886 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JoomSky JS Help Desk js-support-ticket allows S… Js Help Desk 2.9.3+ Fix from $2,3002025-04-01 CRITICAL 9.3 CVE-2025-30876 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ads by WPQuads Ads by WPQuads quick-adsense-rel… Mitigation only Fix from $2,3002025-04-01 CRITICAL 9.3 CVE-2025-30622 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in torsteino PostMash postmash-custom allows SQL I… Mitigation only Fix from $2,3002025-04-01 CRITICAL 9.8 CVE-2025-30774 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ays Pro Quiz Maker quiz-maker allows SQL Inject… Quiz Maker 6.6.8.8+ Fix from $2,3002025-04-01 HIGH 8.5 CVE-2025-30589 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Dourou Flickr set slideshows flickr-set-slidesh… Mitigation only Fix from $1,9502025-04-01 CRITICAL 9.8 CVE-2025-3045 A vulnerability, which was classified as critical, was found in oretnom23/SourceCodester Apartment Visitor Management System 1.0. Affected is an unkn… Apartment Visitor Management System No fix yet Fix from $2,3002025-04-01 HIGH 8.8 CVE-2025-3038 A vulnerability was found in code-projects Payroll Management System 1.0 and classified as critical. This issue affects some unknown processing of th… Payroll Management System No fix yet Fix from $1,9502025-03-31 HIGH 8.8 CVE-2025-3039 A vulnerability was found in code-projects Payroll Management System 1.0. It has been classified as critical. Affected is an unknown function of the … Payroll Management System No fix yet Fix from $1,9502025-03-31 HIGH 7.5 CVE-2025-3018 A vulnerability, which was classified as critical, was found in SourceCodester Online Eyewear Shop 1.0. Affected is an unknown function of the file /… Online Eyewear Shop No fix yet Fix from $1,9502025-03-31 MEDIUM 6.3 CVE-2025-3009 A vulnerability classified as critical was found in Jinher Network OA C6. Affected by this vulnerability is an unknown functionality of the file /C6/… Mitigation only Fix from $1,6002025-03-31 CRITICAL 9.8 CVE-2025-3006 A vulnerability was found in PHPGurukul e-Diary Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of t… E Diary Management System No fix yet Fix from $2,3002025-03-31 MEDIUM 6.3 CVE-2025-3003 A vulnerability, which was classified as critical, was found in ESAFENET CDG 3. Affected is an unknown function of the file /CDGServer3/UserAjax. The… Mitigation only Fix from $1,6002025-03-31 HIGH 8.5 CVE-2025-31542 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wphocus My auctions allegro my-auctions-allegro… Mitigation only Fix from $1,9502025-03-31 HIGH 8.5 CVE-2025-31547 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aphotrax Uptime Robot Plugin for WordPress upti… Mitigation only Fix from $1,9502025-03-31 HIGH 8.5 CVE-2025-31526 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in eleopard Behance Portfolio Manager portfolio-ma… Mitigation only Fix from $1,9502025-03-31 HIGH 8.8 CVE-2025-2984 A vulnerability was found in code-projects Payroll Management System 1.0 and classified as critical. Affected by this issue is some unknown functiona… Payroll Management System No fix yet Fix from $1,9502025-03-31 HIGH 8.8 CVE-2025-2985 A vulnerability was found in code-projects Payroll Management System 1.0. It has been classified as critical. This affects an unknown part of the fil… Payroll Management System No fix yet Fix from $1,9502025-03-31 CRITICAL 9.8 CVE-2025-3011 SOOP-CLM from PiExtract has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify… Mitigation only Fix from $2,3002025-03-31 CRITICAL 9.8 CVE-2025-2951 A vulnerability classified as critical has been found in Bluestar Micro Mall 1.0. Affected is an unknown function of the file /api/data.php. The mani… Micro Mall No fix yet Fix from $2,3002025-03-30 CRITICAL 9.8 CVE-2025-28087 Sourcecodester Online Exam System 1.0 is vulnerable to SQL Injection via dash.php. Online Exam System No fix yet Fix from $2,3002025-03-28 CRITICAL 9.8 CVE-2025-2927 A vulnerability was found in ESAFENET CDG 5.6.3.154.205. It has been classified as critical. Affected is an unknown function of the file /parameter/g… Cdg No fix yet Fix from $2,3002025-03-28 CRITICAL 9.8 CVE-2025-22953 A SQL injection vulnerability exists in Epicor HCM 2021 1.9, with patches available: 5.16.0.1033/HCM2022, 5.17.0.1146/HCM2023, and 5.18.0.573/HCM2024… Human Capital Management Mitigation only Fix from $2,3002025-03-28 CRITICAL 9.8 CVE-2025-30372 Emlog is an open source website building system. Emlog Pro versions pro-2.5.7 and pro-2.5.8 contain an SQL injection vulnerability. `search_controlle… Emlog 2.5.9+ Fix from $2,3002025-03-28 CRITICAL 9.3 CVE-2025-22523 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in scheduler Schedule schedule allows Blind SQL In… Mitigation only Fix from $2,3002025-03-28 HIGH 8.6 CVE-2024-11504 Input from multiple fields in Streamsoft Prestiż is not sanitized properly, leading to an SQL injection vulnerability, which might be exploited by an… Mitigation only Fix from $1,9502025-03-28 HIGH 8.5 CVE-2025-31466 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Falcon Solutions Duplicate Page and Post duplic… Mitigation only Fix from $1,9502025-03-28 HIGH 7.6 CVE-2025-31099 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in bestweblayout Slider by BestWebSoft slider-bws … Mitigation only Fix from $1,9502025-03-28 MEDIUM 5.3 CVE-2025-2074 The Advanced Google reCAPTCHA plugin for WordPress is vulnerable to generic SQL Injection via the ‘sSearch’ parameter in all versions up to, and incl… Mitigation only Fix from $1,6002025-03-28 CRITICAL 9.3 CVE-2025-26898 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in shinetheme Traveler traveler.This issue affects… Mitigation only Fix from $2,3002025-03-27 CRITICAL 9.8 CVE-2025-30367 WeGIA is a Web manager for charitable institutions. A SQL Injection vulnerability was identified in versions prior to 3.2.6 in the nextPage parameter… Wegia 3.2.6+ Fix from $2,3002025-03-27