Browse CVEs

HIGH 7.6 CVE-2025-23784 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David Jeffrey Contact Form 7 Round Robin Lead D… Mitigation only Fix from $1,9502025-01-22 MEDIUM 6.7 CVE-2025-22980 A SQL Injection vulnerability exists in Senayan Library Management System SLiMS 9 Bulian 9.6.1 via the tempLoanID parameter in the loan form on /admi… Senayan Library Management System Bulian No fix yet Fix from $1,6002025-01-22 HIGH 7.5 CVE-2024-13496 The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to time-based SQL … Gamipress 7.2.2+ Fix from $1,9502025-01-22 MEDIUM 5.3 CVE-2024-13426 The WP-Polls plugin for WordPress is vulnerable to SQL Injection via COOKIE in all versions up to, and including, 2.77.2 due to insufficient escaping… Wp Polls 2.77.3+ Fix from $1,6002025-01-22 CRITICAL 9.8 CVE-2023-27112 pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the projectCode parameter at project.php. Pearprojectapi No fix yet Fix from $2,3002025-01-21 CRITICAL 9.8 CVE-2023-27113 pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the organizationCode parameter at project.php. Pearprojectapi No fix yet Fix from $2,3002025-01-21 HIGH 7.6 CVE-2025-22710 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in storeapps Smart Manager smart-manager-for-wp-e-… Mitigation only Fix from $1,9502025-01-21 HIGH 8.8 CVE-2025-22716 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in taskbuilder Taskbuilder taskbuilder allows SQL … Taskbuilder 3.0.7+ Fix from $1,9502025-01-21 CRITICAL 9.3 CVE-2025-22553 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in dhananjaysingh Multiple Carousel multicarousel … Mitigation only Fix from $2,3002025-01-21 CRITICAL 9.3 CVE-2024-51818EPSS 16% Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in radykal Fancy Product Designer fancy-product-de… Mitigation only Fix from $2,3002025-01-21 HIGH 8.5 CVE-2024-49333 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound Hero Mega Menu - Responsive WordPress … Mitigation only Fix from $1,9502025-01-21 CRITICAL 9.3 CVE-2024-49655 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in reputeinfosystems ARPrice arprice allows SQL In… Mitigation only Fix from $2,3002025-01-21 HIGH 8.5 CVE-2024-49666 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in reputeinfosystems ARPrice arprice allows SQL In… Mitigation only Fix from $1,9502025-01-21 HIGH 8.5 CVE-2024-49303 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound Hero Mega Menu - Responsive WordPress … No fix yet Fix from $1,9502025-01-21 MEDIUM 5.3 CVE-2024-13230 The Social Share, Social Login and Social Comments Plugin – Super Socializer plugin for WordPress is vulnerable to Limited SQL Injection via the ‘Sup… Super Socializer 7.14.1+ Fix from $1,6002025-01-21 CRITICAL 9.8 CVE-2025-23218 WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A SQL Injection vulnerability was identified… Wegia 3.2.10+ Fix from $2,3002025-01-20 CRITICAL 9.8 CVE-2025-23219 WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A SQL Injection vulnerability was identified… Wegia 3.2.10+ Fix from $2,3002025-01-20 CRITICAL 9.8 CVE-2025-23220 WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A SQL Injection vulnerability was identified… Wegia 3.2.10+ Fix from $2,3002025-01-20 CRITICAL 9.8 CVE-2025-0585 The a+HRD from aEnrich Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to re… A\+hrd after 7.5 Fix from $2,3002025-01-20 HIGH 7.3 CVE-2025-0579 A vulnerability was found in Shiprocket Module 3/4 on OpenCart. It has been declared as critical. Affected by this vulnerability is an unknown functi… Mitigation only Fix from $1,9502025-01-20 CRITICAL 9.8 CVE-2025-0565 A vulnerability was found in ZZCMS 2023. It has been rated as critical. Affected by this issue is some unknown functionality of the file /index.php. … Zzcms No fix yet Fix from $2,3002025-01-19 CRITICAL 9.8 CVE-2025-0564 A vulnerability was found in code-projects Fantasy-Cricket 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functi… Fantasy Cricket No fix yet Fix from $2,3002025-01-19 CRITICAL 9.8 CVE-2025-0562 A vulnerability was found in Codezips Gym Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /d… Gym Management System No fix yet Fix from $2,3002025-01-19 CRITICAL 9.8 CVE-2025-0563 A vulnerability was found in code-projects Fantasy-Cricket 1.0. It has been classified as critical. Affected is an unknown function of the file /dash… Fantasy Cricket No fix yet Fix from $2,3002025-01-19 CRITICAL 9.8 CVE-2025-0561 A vulnerability has been found in itsourcecode Farm Management System 1.0 and classified as critical. This vulnerability affects unknown code of the … Farm Management System No fix yet Fix from $2,3002025-01-19 CRITICAL 9.8 CVE-2025-0558 A vulnerability classified as critical was found in TDuckCloud tduck-platform up to 4.0. This vulnerability affects the function QueryProThemeRequest… Tduck Platform after 4.0 Fix from $2,3002025-01-18 HIGH 7.5 CVE-2024-13184 The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to time-based SQL Injection via the Login Attempts module in all … Mitigation only Fix from $1,9502025-01-18 HIGH 7.5 CVE-2025-0308 The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable… Ultimate Member 2.9.2+ Fix from $1,9502025-01-18 CRITICAL 9.8 CVE-2025-0541 A vulnerability was found in Codezips Gym Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /d… Gym Management System No fix yet Fix from $2,3002025-01-17 CRITICAL 9.8 CVE-2025-0540 A vulnerability has been found in itsourcecode Tailoring Management System 1.0 and classified as critical. This vulnerability affects unknown code of… Tailoring Management System No fix yet Fix from $2,3002025-01-17