CVE Intelligence
Início / CVEs

Base de CVEs

Vulnerabilidades publicadas, com severidade, exploração conhecida e fontes oficiais.

Severidade
Limpar

3.688 resultado(s)

Exportar esta busca: RSS · CSV · STIX
CVE-2026-54813 Alta · 8.5 CWE-89 17/06/2026
WordPress SureDash plugin <= 1.8.0 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Brainstorm Force SureDash allows Blind SQL Injection. This issue affects SureDash: from n/a through 1.8.0.
CVE-2026-54809 Crítica · 9.3 CWE-89 17/06/2026
WordPress GIFT4U plugin <= 1.0.10 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VillaTheme GIFT4U allows Blind SQL Injection. This issue affects GIFT4U: from n/a through 1.0.10.
CVE-2026-54808 Crítica · 9.3 CWE-89 17/06/2026
WordPress WP Travel Gutenberg Blocks plugin <= 3.9.4 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Travel WP Travel Gutenberg Blocks allows Blind SQL Injection. This issue affects WP Travel Gutenberg Blocks: from n/a through 3.9.4.
CVE-2025-59554 Crítica · 9.3 CWE-89 17/06/2026
WordPress Advanced Ads – Tracking plugin < 3.0.7 - SQL Injection vulnerability
Unauthenticated SQL Injection in Advanced Ads – Tracking < 3.0.7 versions.
CVE-2026-54811 Crítica · 9.3 CWE-89 17/06/2026
Plugin WP eMember para WordPress - Injeção de SQL não autenticada
Injeção de SQL não autenticada no WP eMember, em versões anteriores a v10.9.4.
CVE-2026-54187 Crítica · 9.3 CWE-89 17/06/2026
WordPress JetEngine plugin <= 3.8.10.1 - SQL Injection vulnerability
Unauthenticated SQL Injection in JetEngine <= 3.8.10.1 versions.
CVE-2026-54186 Crítica · 9.3 CWE-89 17/06/2026
WordPress JobSearch plugin <= 3.2.9 - SQL Injection vulnerability
Unauthenticated SQL Injection in JobSearch <= 3.2.9 versions.
CVE-2026-54185 Alta · 8.5 CWE-89 17/06/2026
WordPress Cornerstone plugin < 7.8.8 - SQL Injection vulnerability
Subscriber SQL Injection in Cornerstone < 7.8.8 versions.
CVE-2026-49084 Crítica · 9.3 CWE-89 17/06/2026
WordPress JetEngine plugin < 3.8.9.1 - SQL Injection vulnerability
Unauthenticated SQL Injection in JetEngine < 3.8.9.1 versions.
CVE-2026-49080 Crítica · 9.3 CWE-89 17/06/2026
WordPress wpDataTables plugin <= 7.3.6 - SQL Injection vulnerability
Unauthenticated SQL Injection in wpDataTables <= 7.3.6 versions.
CVE-2026-49079 Crítica · 9.3 CWE-89 17/06/2026
WordPress JetSearch plugin <= 3.5.17 - SQL Injection vulnerability
Unauthenticated SQL Injection in JetSearch <= 3.5.17 versions.
CVE-2026-49076 Crítica · 9.3 CWE-89 17/06/2026
WordPress JetEngine plugin <= 3.8.9.1 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crocoblock JetEngine jet-engine allows Blind SQL Injection.This issue affects JetEngine: from n/a through 3.8.9.1.
CVE-2026-49073 Alta · 8.5 CWE-89 17/06/2026
WordPress Directorist Booking plugin <= 3.0.3 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpWax Directorist Booking allows Blind SQL Injection. This issue affects Directorist Booking: from n/a through 3.0.3.
CVE-2026-48967 Alta · 8.5 CWE-89 17/06/2026
WordPress Geo Mashup plugin <= 1.13.19 - SQL Injection vulnerability
Subscriber SQL Injection in Geo Mashup <= 1.13.19 versions.
CVE-2026-48875 Crítica · 9.3 CWE-89 17/06/2026
WordPress JetSmartFilters plugin <= 3.8.1 - SQL Injection vulnerability
Unauthenticated SQL Injection in JetSmartFilters <= 3.8.1 versions.
CVE-2026-39596 Crítica · 9.3 CWE-89 17/06/2026
Plugin Blocksy Companion Pro para WordPress - SQL Injection não autenticada
SQL Injection não autenticada no Blocksy Companion Pro, versões < 2.1.29.
CVE-2026-39438 Crítica · 9.3 CWE-89 17/06/2026
Plugin ListingPro para WordPress: Injeção de SQL não autenticada
Injeção de SQL não autenticada em versões do ListingPro <= 2.9.10.
CVE-2026-28576 Média · 5.5 CWE-89 17/06/2026
SQL Injection em Google Android
In Contacts Provider, there is a possible way to access the contacts database due to SQL injection. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-22340 Crítica · 9.3 CWE-89 17/06/2026
WordPress WPJobster theme <= 6.3.5 - SQL Injection vulnerability
Unauthenticated SQL Injection in WPJobster <= 6.3.5 versions.
CVE-2026-22335 Alta · 8.5 CWE-89 17/06/2026
WordPress WooCommerce Frontend Manager – Ultimate plugin < 6.7.7 - SQL Injection vulnerability
Subscriber SQL Injection in WooCommerce Frontend Manager – Ultimate < 6.7.7 versions.
CVE-2026-22332 Crítica · 9.3 CWE-89 17/06/2026
WordPress Tutor LMS Pro plugin <= 3.9.6 - SQL Injection vulnerability
Unauthenticated SQL Injection in Tutor LMS Pro <= 3.9.6 versions.
CVE-2026-12360 Alta · 7.5 CWE-89 17/06/2026
JetEngine <= 3.8.10.1 - Unauthenticated SQL Injection via Listing Grid Load More AJAX Endpoint
The JetEngine plugin for WordPress is vulnerable to SQL injection in all versions up to and including 3.8.10.1. The listing_load_more AJAX handler accepts a filtered_query parameter that is intentionally excluded from the HMAC query signature check to support front-end filter integration. However, meta_query row values within filtered_query are not sanitized before being merged into SQL construction. This makes it possible for unauthenticated attackers to perform time-based or boolean blind SQL injection by appending a malicious meta_query value to a Load More AJAX request captured from any public Listing Grid page.
CVE-2025-69135 Alta · 8.5 CWE-89 17/06/2026
WordPress Events Schedule - WordPress Events Calendar Plugin plugin <= 2.7.2 - SQL Injection vulnerability
Subscriber SQL Injection in Events Schedule - WordPress Events Calendar Plugin <= 2.7.2 versions.
CVE-2026-52715 Crítica · 9.3 Exploit público CWE-89 16/06/2026
WordPress GEO my WordPress plugin <= 4.5.5 - SQL Injection vulnerability
Unauthenticated SQL Injection in GEO my WordPress <= 4.5.5 versions.
CVE-2026-52712 Alta · 7.6 CWE-89 16/06/2026
WordPress Attendance Manager plugin <= 0.6.2 - SQL Injection vulnerability
Subscriber SQL Injection in Attendance Manager <= 0.6.2 versions.